Security Regulatory Manager

Department of Education; Melbourne; On-site; AUD 150,000 - 190,000; Full time

Job summary

The Department of Education invites a Security Regulatory Manager to lead enterprise‑wide information security compliance initiatives and the annual Victorian Protective Data Security Standards (VPDSS) reporting program across Victoria’s public education network. You will work with senior leaders, regulators and education entities to strengthen governance and improve compliance maturity.

Based in the Department’s Information Management and Technology Division, you will design and deliver

Qualifications

• Relevant tertiary qualifications in cyber security, information technology, governance, risk management, business or a related discipline.
• Professional certifications such as CISSP, CISM, CRISC or equivalent.
• Project, program or portfolio management certification.
• Demonstrated experience leading large-scale information security compliance or regulatory programs within complex and geographically dispersed environments.
• Exceptional stakeholder engagement and influencing skills, with the proven ability to achieve outcomes across executive, technical and operational audiences.
• Strong written and verbal communication skills, including experience preparing executive briefings and regulatory reporting.

Responsibilities

• Provide strategic leadership for the department's VPDSS reporting program and broader information security regulatory obligations.
• Oversee design, delivery and continuous improvement of VPDSS reporting frameworks and stakeholder engagement strategies.
• Collaborate with senior executives, regulators and education sector stakeholders to ensure regulatory obligations are met.
• Strengthen information security governance and risk management across a highly distributed environment.

Skills

VPDSS reporting experience

Information security governance

Program management

Stakeholder engagement

Executive communications

Education

Tertiary qualification in cyber security / IT / governance

Professional certifications (CISSP, CISM, CRISC)

Job description

The Security Regulatory Manager is responsible for leading the Victorian Protective Data Security Standards (VPDSS) reporting program across a complex and distributed operating environment of more than 1600 entities including the department, Victorian government schools, school councils Earyl Childhood Education and department entities and subsidiaries.
The incumbent is responsible for developing and maintaining department-wide reporting frameworks, assurance mechanisms and stakeholder engagement strategies that support compliance with the Victorian Protective Data Security Framework (VPDSF), and broader information security obligations and strengthen compliance maturity.

Are you an experienced regulatory compliance leader with a passion for information security, governance and large‑scale program delivery?

The Department of Education is seeking a highly motivated Security Regulatory Manager to lead enterprise‑wide information security compliance initiatives and deliver the annual Victorian Protective Data Security Standards (VPDSS) reporting program across one of Victoria's largest and most complex public sector environments. This is an opportunity to influence regulatory compliance outcomes at scale, working with senior leaders, regulators and stakeholders across over 1,600 schools and education entities to strengthen information security governance, improve compliance maturity and support the protection of sensitive information across the Victorian education system.

About the Role

As Security Regulatory Manager, you will provide strategic leadership for the department's VPDSS reporting program and broader information security regulatory obligations. You will oversee the design, delivery and continuous improvement of VPDSS reporting frameworks, and stakeholder engagement strategies that strengthen compliance maturity and support effective cyber risk management across a highly distributed environment.

You will work closely with senior executives, regulators, government agencies and education sector stakeholders to ensure the department continues to meet its regulatory obligations and maintain high standards of information security governance.

About Us

The Information Management and Technology Division (IMTD) supports one of the largest technology environments in Victoria, serving more than 1,600 government schools, Early Learning Education, approximately 50,000 teachers and 650,000 students. The division delivers secure, reliable and innovative digital services that enable educational excellence across the state.

The Information Security Branch plays a critical role in safeguarding the department's information assets and providing assurance to executive leadership, government and regulators that strategic information security risks are effectively managed.

What We're Looking For

We're seeking an experienced regulatory compliance and program delivery leader with the ability to drive outcomes in complex environments.

You will bring:

• Demonstrated experience leading large-scale VPDSS reporting program across complex and distributed entities across Victoria.


• Strong understanding of information security, cyber security and the VPDSS framework and obligations.


• Strong program management capabilities, including planning, governance, risk management and delivery oversight.


• Exceptional stakeholder engagement and influencing skills, with experience working across executive, operational and external stakeholder groups.


• Excellent communication skills, with the ability to prepare executive briefings, strategic communications and regulatory reporting.

About You

To be successful in this role, you will bring:

Essential

• Relevant tertiary qualifications in cyber security, information technology, governance, risk management, business or a related discipline.


• Professional certifications such as CISSP, CISM, CRISC or equivalent.


• Project, program or portfolio management certification.


• Demonstrated experience leading large-scale information security compliance or regulatory programs within complex and geographically dispersed environments.


• Exceptional stakeholder engagement and influencing skills, with the proven ability to achieve outcomes across executive, technical and operational audiences.


• Strong written and verbal communication skills, including experience preparin

Desirable

• Demonstrated success driving regulatory uplift initiatives and foster a strong culture of compliance across the organisation.


• Experience supporting audits, regulatory reviews and external assurance activities.


• Experience with governance, risk and compliance (GRC) platforms and reporting solutions.

Why Join Us?

This is a unique opportunity to influence information security and regulatory compliance across Victoria's education sector. You will lead a high-profile program with significant executive visibility, shape compliance outcomes across more than 1,600 entities and contribute directly to protecting the information and privacy of students, staff and communities.

For further information about this opportunity, please refer to Role Statement 2026 - Regulatory Manager, ISB.

The department values diversity and inclusion in all forms - gender, religion, ethnicity, LGBTIQ+, disability and neurodiversity. Aboriginal and Torres Strait Islander candidates are strongly encouraged to apply. For more information about our work, working for the Department, diversity and inclusion, and our employment conditions visit the Department website and our Diversity and Inclusion page

Applicants requiring adjustments can contact the nominated contact person.

Information about the Department of Education's operations and employment conditions can be located at www.education.vic.gov.au.

For further information pertaining to the role, please contact Robert Munozvia ************@education.vic.gov.au.

Preferred applicants may be required to complete a police check and may be subject to other pre-employment checks. Information provided to the Department of Education will be treated in the strictest confidence.

Please let us know via phone or email if you require any adjustments to ensure your full participation in the recruitment process or if you need the ad or any attachments in an accessible format (e.g large print) due to any viewing difficulties or other accessibility requirements.

Applications close 11:59pm on 19 November 2026.