Senior Digital Forensics and eDiscovery Analyst

NSW Department of Customer Service; Sydney; Hybrid; AUD 133,000 - 147,000; Full time

Benefits offered by this job

20 days annual leave

Flexible leave up to 24 days

Job summary

NSW Department of Customer Service in Sydney CBD is seeking a Senior Digital Forensics and eDiscovery Analyst to provide specialist capability within the cyber security function. The role undertakes hands‑on forensic analysis and evidence handling across enterprise and cloud environments, supporting insider risk investigations and digital incident response in line with legal and policy requirements.

Office located in Sydney CBD with weekly attendance; hybrid working options available.

Qualifications

• An experienced cyber security professional with five years' experience in a senior analyst role, specialising in digital forensics, Purview eDiscovery, and insider risk investigations in complex environments.

Responsibilities

• Conduct digital forensic examinations and technical analysis across endpoints, enterprise systems, and cloud platforms in line with approved procedures and legal requirements.
• Triage and analyse insider risk alerts and referrals, applying analytical judgement and escalating complex or high‑risk matters in accordance with governance arrangements.
• Acquire, preserve, and document digital evidence in line with chain‑of‑custody requirements to ensure evidentiary integrity and admissibility.
• Support the operations and execution of eDiscovery and evidence preservation processes across on‑premises and cloud environments, including cloud‑based artefacts.
• Prepare clear and well‑structured investigative notes, technical findings, and reports to support organisational and regulatory requirements.

Skills

Digital forensics

eDiscovery

Insider risk investigations

Cloud platforms

Tools

Purview eDiscovery

Evidence handling tools

Job description

Senior Digital Forensics and eDiscovery Analyst

NSW Department of Customer Service – Sydney CBD NSW

Senior Digital Forensics and eDiscovery Analyst, Ongoing opportunity based in Sydney CBD, plus hybrid working options available

The Department of Customer Service is looking for a Senior Digital Forensics and eDiscovery Analyst to provide specialist digital forensic and eDiscovery capability within the cyber security function. The role undertakes hands‑on forensic analysis and evidence handling across enterprise and cloud environments, supporting insider risk investigations and digital incident response in accordance with legal and policy requirements.

• Fantastic ongoing grade 9/10 senior technical role providing hands‑on forensic, eDiscovery, and insider risk expertise to support complex investigations and operational excellence.
• Office located in Sydney CBD, with weekly office attendance required
• Salary range: $133,348 - $146,945+ super, commensurate with experience.
• Excellent leave entitlements: 20 days annual leave, plus up to an additional 24 day flexible leave.

About you

• An experienced cyber security professional with five years' experience in a senior analyst role, specialising in digital forensics, Purview eDiscovery, and insider risk investigations in complex environments.
• Demonstrated experience conducting digital forensic analysis across endpoints, enterprise systems, and cloud platforms to support insider risk, data loss, and misuse investigations.
• Strong hands‑on capability in digital forensics, Purview eDiscovery, and evidence handling, with sound knowledge of chain‑of‑custody, privacy, and regulatory requirements.
• Experience supporting Purview eDiscovery and evidence preservation across on‑premises and cloud environments, including cloud‑based artefacts such as virtual machines and storage.
• Methodical and detail‑focused, with experience using forensic tools to acquire, analyse, and document digital evidence, and the ability to work effectively with technical and business stakeholders.
• Demonstrates integrity, accountability, and ethical conduct, upholds public sector values, and can attain and maintain the required security clearance.

Responsibilities include

• Conduct digital forensic examinations and technical analysis across endpoints, enterprise systems, and cloud platforms in line with approved procedures and legal requirements.
• Triage and analyse insider risk alerts and referrals, applying analytical judgement and escalating complex or high‑risk matters in accordance with governance arrangements.
• Acquire, preserve, and document digital evidence in line with chain‑of‑custody requirements to ensure evidentiary integrity and admissibility.
• Support the operations and execution of eDiscovery and evidence preservation processes across on‑premises and cloud environments, including cloud‑based artefacts.
• Use forensic and evidence collection tools to acquire, analyse, and validate digital artefacts, ensuring accurate documentation and secure handling of evidence.
• Prepare clear and well‑structured investigative notes, technical findings, and reports to support organisational and regulatory requirements.
• Apply approved policies, procedures, and playbooks consistently to ensure ethical, standardised, and compliant investigative practices.
• Work collaboratively with cyber security, legal, HR, privacy, and operational stakeholders to support investigations and manage sensitive matters.
• Contribute to continuous improvement by identifying process gaps and opportunities to enhance investigative workflows and practices.
• Uphold confidentiality, privacy, and ethical standards across all investigative activities.
• Australian citizenship with the successful applicant having, or being able to attain and maintain, a baseline security clearance or higher as a condition of employment.

Salary Grade 9/10, with the base salary for this role starting at $133,348 base plus superannuation

Careers at Department of Customer Service

A career at the Department of Customer Service (DCS) gives you the opportunity to help improve government services and be part of reform that benefits people across NSW. We are focused on delivering excellent customer service, digital transformation, and regulatory reform. Come join us and influence the future of our great state.

Belong in our diverse and inclusive workplace

The strength of our workforce lies in its diversity and embracing difference, while the key to our success is leveraging the contributions of employees with different backgrounds and perspectives.

You can view our full diversity and inclusion statement here.

We provide adjustments to the recruitment process for candidates, including individuals with disability. If you require an adjustment during the recruitment process, including alternate formats or have questions about the support available, please contact Talent Operations on 02 8276 8*** or *************@customerservice.nsw.gov.au.

For more information, please visit

Information on some of the different types of disabilities

Information on adjustments available for the recruitment process