Senior Security & Compliance Analyst

Department of Customer Service; Sydney; Hybrid; AUD 133,000 - 147,000; Full time

Benefits offered by this job

Flexible working arrangements

Career development

Work-life balance

Wellbeing support

Inclusive culture

Leave entitlements

Job summary

Cyber Security NSW is seeking a Senior Security & Compliance Analyst in Sydney for a 12-month temporary full-time role. The position focuses on threat monitoring, incident response, vulnerability management and security operations across government services.

You will work with delivery, infrastructure and cyber security teams to strengthen security controls while supporting cloud platforms and CI/CD environments. Flexible working and hybrid office presence apply.

Qualifications

• Cyber security operations experience in enterprise environments.
• Experience in threat monitoring, incident response and remediation.
• Ability to assess risks and implement security controls.

Responsibilities

• Monitor and respond to cyber security alerts and incidents across enterprise environments.
• Lead vulnerability management activities including remediation tracking and reporting.
• Ensure patching of OS, applications and infrastructure to maintain security posture.
• Support cloud security operations and DevSecOps pipelines.

Skills

Cyber security operations

Threat detection

Incident response

Vulnerability management

Cloud security

DevSecOps

CI/CD pipelines

Security documentation

Education

Bachelor's degree in cyber security or related field

Tools

Security monitoring tools

Job description

Senior Security & Compliance Analyst • Role type: Temporary Full-Time (35hpw) opportunity for up to 12 months, with the possibility of ongoing. • Salary: Clerk Grade 9/10 - Package $133,348 to $146,945 base p/a plus superannuation and annual leave loading. • Location: Sydney CBD, with hybrid working conditions and a 50% office presence required. Flexible working arrangements may be available in line with the DCS Flexible Working Policy.

About the role

We're seeking an experienced cyber security professional to join the ID Support team within Cyber Security NSW. This is an exciting opportunity to play a critical role in protecting government systems, services and sensitive information that support the people of NSW. Working within a collaborative and high-performing cyber security environment, you'll contribute to the security, resilience and compliance of critical digital services through threat monitoring, incident response, vulnerability management and security operations. As a technical specialist, you'll work across a diverse technology landscape, partnering with delivery, infrastructure and cyber security teams to identify emerging threats, strengthen security controls and continuously improve security outcomes. Your work will directly support the secure operation of services that make a meaningful difference to the community.

Key responsibilities

• Monitor, investigate and respond to cyber security alerts, incidents and suspicious activity across enterprise environments.
• Conduct technical investigations and support cyber incident response activities to minimise risk and improve resilience.
• Lead and coordinate vulnerability management activities, including risk assessment, remediation tracking and stakeholder reporting.
• Implement, monitor and validate operating system, application and infrastructure patching to maintain strong security posture.
• Maintain and optimise security monitoring, logging and alerting capabilities to support threat detection and response.
• Support the operation, integration and continuous improvement of security technologies across cloud, infrastructure and application environments.
• Contribute to the secure operation of cloud platforms, DevSecOps pipelines, CI/CD environments and associated security tooling.
• Identify cyber security risks and vulnerabilities and provide practical recommendations to strengthen security controls.
• Develop and maintain operational procedures, technical documentation and security runbooks.
• Support internal and external audits, assurance activities and compliance assessments.
• Maintain evidence and reporting to demonstrate compliance with NSW Government and agency cyber security obligations.
• Build strong relationships with internal stakeholders, vendors and service providers to drive positive security outcomes and remediation activities.

About you

• Cyber security operations, security monitoring and threat detection.
• Investigating cyber security incidents, alerts and suspicious activity.
• Vulnerability management, remediation coordination and risk assessment.
• Security patch management and validation across enterprise environments.
• Analysing security logs, events and monitoring data to identify threats and security weaknesses.
• Supporting cloud security operations and modern technology environments.
• Working within DevSecOps, CI/CD and secure software delivery practices.
• Developing technical documentation, procedures and operational security artefacts.
• Collaborating with technical and non-technical stakeholders to deliver security outcomes.
• Tertiary qualifications in cyber security, information security, information technology or a related discipline are highly regarded.
• Equivalent industry experience will also be considered.

Essential requirements

• Australian citizenship
• Ability to obtain and maintain a Negative Vetting Level 1 (NV1) security clearance.
• Successful completion of pre-employment screening requirements, including a National Police Check.
• Understanding of infrastructure and architecture, with the ability to identify and challenge security configurations, integrations, and operational risks, and translate these into actionable guidance that supports secure, compliant system maintenance and control maturity necessary to satisfy strict compliance frameworks.
• Demonstrated hands‑on experience supporting, administering or operating secure and compliant enterprise technology environments.

Why work for Cyber NSW?

• Flexible working: We offer a broad range of flexible working arrangements.
• Career development: Ongoing learning and development opportunities through expert-led sessions, online training and professional development opportunities.
• Work-life balance: Flex time accrual for extra hours worked (for non-Exec roles) based on a 35-hour work week.
• Wellbeing support: Access to employee assistance programs, including EAP, Fitness Passport, and wellbeing initiatives.
• Inclusive culture: Staff led Employee Resource Groups (ERGs) including DCS Pride, Young Professionals Network and more.
• Leave entitlements: Four weeks annual leave and paid sick leave, carer’s leave, and long service leave.

About the team

Our Governance, Risk, Compliance and Assurance team protects and strengthens the security, integrity and resilience of ID Support NSW services. As part of a multidisciplinary assurance function, this role provides technical cyber security expertise across security operations, threat monitoring, incident response, vulnerability management, cloud security and secure platform operations. The team supports the ongoing uplift and assurance of security controls, identifies and responds to emerging cyber threats, drives remediation activities, and provides technical security advice to projects and operational teams. Working closely with technology stakeholders and, where required, partnering with the CISO function, the team helps ensure systems and services remain secure, compliant and aligned with NSW Government security obligations and industry best practice. ID Support NSW, within Cyber Security NSW, supports individuals and organisations prevent, respond and recover to data breaches. The team provides the public with specialised remediation support to help individuals secure their identity following a compromise and delivers public-facing education and awareness programs that foster privacy and identity resilience across NSW, as well as leading the NSW Government response to data breaches.

About Cyber Security NSW

Cyber Security NSW provides centralised services and all-of-government leadership to drive a cyber‑resilient NSW Government that can safeguard the confidentiality, integrity and availability of government systems, services and data for NSW communities. Cyber Security NSW is an all-of-government function located within Digital NSW in the Department of Customer Service. Learn more about Our Vision and Cyber Security NSW . ID Support NSW, within Cyber Security NSW, supports individuals and organisations prevent, respond and recover to data breaches. The team provides the public with specialised remediation support to help individuals secure their identity following a compromise and delivers public-facing education and awareness programs that foster privacy and identity resilience across NSW, as well as leading the NSW Government response to data breaches. With recent data breaches and increasing fraud, identity resilience is key to preventing misuse.

Salary Grade 9/10, with the base salary for this role starting at $133,348 base plus superannuation Click Here to access the Role Description.

For enquiries relating to recruitment please contact Amy Vierboom via [e-mail].

Visit the Capability Application Tool to prepare for the recruitment process by accessing practice application and interview questions based on the focus capabilities listed in the role description.

A talent pool may be created as part of this recruitment process and will be valid for up to 18 months.

Closing Date: Thursday 12 November 2026 @ 11:59PM

Belong in our diverse and inclusive workplace

The strength of our workforce lies in its diversity and embracing difference, while the key to our success is leveraging the contributions of employees with different backgrounds and perspectives. You can view our full diversity and inclusion statement here.

We provide adjustments to the recruitment process for candidates, including individuals with disability. If you require an adjustment during the recruitment process, including alternate formats or have questions about the support available, please contact Talent Operations on 02 8276 8130 or [e-mail].

For more information, please visit Information on some of the different types of disabilities Information on adjustments available for the recruitment process.