Security Regulatory Manager

Department of Education & Training, Victoria; Melbourne; On-site; AUD 150,000 - 190,000; Full time

Job summary

Department of Education & Training, Victoria seeks a Security Regulatory Manager to lead the annual VPDSS reporting program and broader information security regulatory obligations across Victoria's education sector.

You will oversee design and delivery of reporting frameworks, engage regulators and executives, and drive continuous improvements in governance and cyber risk management across a large, distributed environment.

Qualifications

• Extensive experience leading large-scale regulatory programs.
• Strong understanding of information security and VPDSS obligations.
• Proven ability to engage executives and regulators.

Responsibilities

• Lead the VPDSS reporting program and regulatory obligations.
• Design deliver and improve reporting frameworks.
• Engage senior stakeholders to strengthen compliance maturity.

Skills

Regulatory leadership

Information security

Stakeholder engagement

Governance

Regulatory reporting

Education

Cyber security qualification

Governance/risk management cert

Project/program management cert

Tools

GRC platforms

Regulatory reporting tools

Job description

Are you an experienced regulatory compliance leader with a passion for information security, governance and large-scale program delivery? The Department of Education is seeking a highly motivated Security Regulatory Manager to lead enterprise-wide information security compliance initiatives and deliver the annual Victorian Protective Data Security Standards (VPDSS) reporting program across one of Victoria's largest and most complex public sector environments. This is an opportunity to influence regulatory compliance outcomes at scale, working with senior leaders, regulators and stakeholders across over 1,600 schools and education entities to strengthen information security governance, improve compliance maturity and support the protection of sensitive information across the Victorian education system.

About the Role

As Security Regulatory Manager, you will provide strategic leadership for the department's VPDSS reporting program and broader information security regulatory obligations. You will oversee the design, delivery and continuous improvement of VPDSS reporting frameworks, and stakeholder engagement strategies that strengthen compliance maturity and support effective cyber risk management across a highly distributed environment. You will work closely with senior executives, regulators, government agencies and education sector stakeholders to ensure the department continues to meet its regulatory obligations and maintain high standards of information security governance.

About Us

The Information Management and Technology Division (IMTD) supports one of the largest technology environments in Victoria, serving more than 1,600 government schools, Early Learning Education, approximately 50,000 teachers and 650,000 students. The division delivers secure, reliable and innovative digital services that enable educational excellence across the state. The Information Security Branch plays a critical role in safeguarding the department's information assets and providing assurance to executive leadership, government and regulators that strategic information security risks are effectively managed.

What We’re Looking For

We’re seeking an experienced regulatory compliance and program delivery leader with the ability to drive outcomes in complex environments.

• Demonstrated experience leading large-scale VPDSS reporting program across complex and distributed entities across Victoria.
• Strong understanding of information security, cyber security and the VPDSS framework and obligations.
• Strong program management capabilities, including planning, governance, risk management and delivery oversight.
• Exceptional stakeholder engagement and influencing skills, with experience working across executive, operational and external stakeholder groups.
• Excellent communication skills, with the ability to prepare executive briefings, strategic communications and regulatory reporting.

About You

To be successful in this role, you will bring:

Essential

• Relevant tertiary qualifications in cyber security, information technology, governance, risk management, business or a related discipline.
• Professional certifications such as CISSP, CISM, CRISC or equivalent.
• Project, program or portfolio management certification.
• Demonstrated experience leading large-scale information security compliance or regulatory programs within complex and geographically dispersed environments.
• Exceptional stakeholder engagement and influencing skills, with the proven ability to achieve outcomes across executive, technical and operational audiences.
• Strong written and verbal communication skills, including experience preparin

Desirable

• Demonstrated success driving regulatory uplift initiatives and foster a strong culture of compliance across the organisation.
• Experience supporting audits, regulatory reviews and external assurance activities.
• Experience with governance, risk and compliance (GRC) platforms and reporting solutions.

Why Join Us?

This is a unique opportunity to influence information security and regulatory compliance across Victoria's education sector. You will lead a high-profile program with significant executive visibility, shape compliance outcomes across more than 1,600 entities and contribute directly to protecting the information and privacy of students, staff and communities.

For further information about this opportunity, please refer to Role Statement 2026 - Regulatory Manager, ISB.

The department values diversity and inclusion in all forms - gender, religion, ethnicity, LGBTIQ+, disability and neurodiversity. Aboriginal and Torres Strait Islander candidates are strongly encouraged to apply.

Applicants requiring adjustments can contact the nominated contact person.

Information about the Department of Education's operations and employment conditions can be located at www.education.vic.gov.au.

For further information pertaining to the role, please contact Robert Munoz via [e-mail].

Preferred applicants may be required to complete a police check and may be subject to other pre-employment checks.

Information provided to the Department of Education will be treated in the strictest confidence.

Please let us know via phone or email if you require any adjustments to ensure your full participation in the recruitment process or if you need the ad or any attachments in an accessible format (e.g large print) due to any viewing difficulties or other accessibility requirements.

Applications close 11:59pm on 19 November 2026.