Senior Digital Forensics & eDiscovery Analyst - Hybrid

NSW Department of Customer Service; Sydney; Hybrid; AUD 133,000 - 147,000; Full time

Benefits offered by this job

20 days annual leave

Flexible leave up to 24 days

Job summary

NSW Department of Customer Service in Sydney CBD is seeking a Senior Digital Forensics and eDiscovery Analyst to provide specialist capability within the cyber security function. The role undertakes hands‑on forensic analysis and evidence handling across enterprise and cloud environments, supporting insider risk investigations and digital incident response in line with legal and policy requirements.

Office located in Sydney CBD with weekly attendance; hybrid working options available.

Qualifications

• An experienced cyber security professional with five years' experience in a senior analyst role, specialising in digital forensics, Purview eDiscovery, and insider risk investigations in complex environments.

Responsibilities

• Conduct digital forensic examinations and technical analysis across endpoints, enterprise systems, and cloud platforms in line with approved procedures and legal requirements.
• Triage and analyse insider risk alerts and referrals, applying analytical judgement and escalating complex or high‑risk matters in accordance with governance arrangements.
• Acquire, preserve, and document digital evidence in line with chain‑of‑custody requirements to ensure evidentiary integrity and admissibility.
• Support the operations and execution of eDiscovery and evidence preservation processes across on‑premises and cloud environments, including cloud‑based artefacts.
• Prepare clear and well‑structured investigative notes, technical findings, and reports to support organisational and regulatory requirements.

Skills

Digital forensics

eDiscovery

Insider risk investigations

Cloud platforms

Tools

Purview eDiscovery

Evidence handling tools

Job description

NSW Department of Customer Service in Sydney CBD is seeking a Senior Digital Forensics and eDiscovery Analyst to provide specialist capability within the cyber security function. The role undertakes hands‑on forensic analysis and evidence handling across enterprise and cloud environments, supporting insider risk investigations and digital incident response in line with legal and policy requirements.

Office located in Sydney CBD with weekly attendance; hybrid working options available.