Senior Security & Compliance Analyst

NSW Department of Customer Service; Sydney; Hybrid; AUD 133,000 - 147,000; Full time

Benefits offered by this job

Flexible working

Career development

Work-life balance

Wellbeing support

Inclusive culture

Leave entitlements

Job summary

NSW Department of Customer Service is seeking an experienced cyber security professional to join the ID Support team within Cyber Security NSW. This role focuses on threat monitoring, incident response, vulnerability management and security operations to protect government systems and sensitive information across NSW.

You'll work across cloud, infrastructure and application environments, collaborating with delivery, infrastructure and cyber security teams to strengthen security controls and

Qualifications

• To be successful in this role, you'll bring a combination of technical cyber security expertise, analytical thinking and a proactive approach to managing security risks.
• Tertiary qualifications in cyber security, information security, information technology or a related discipline are highly regarded.
• Equivalent industry experience will also be considered.
• Ability to obtain and maintain a Negative Vetting Level 1 (NV1) security clearance.
• Successful completion of pre-employment screening requirements, including a National Police Check.

Responsibilities

• Monitor, investigate and respond to cyber security alerts, incidents and suspicious activity across enterprise environments.
• Conduct technical investigations and support cyber incident response activities to minimise risk and improve resilience.
• Lead and coordinate vulnerability management activities, including risk assessment, remediation tracking and stakeholder reporting.
• Implement, monitor and validate operating system, application and infrastructure patching to maintain strong security posture.
• Maintain and optimise security monitoring, logging and alerting capabilities to support threat detection and response.
• Support the operation, integration and continuous improvement of security technologies across cloud, infrastructure and application environments.
• Contribute to the secure operation of cloud platforms, DevSecOps pipelines, CI/CD environments and associated security tooling.
• Identify cyber security risks and vulnerabilities and provide practical recommendations to strengthen security controls.
• Develop and maintain operational procedures, technical documentation and security runbooks.
• Support internal and external audits, assurance activities and compliance assessments.
• Maintain evidence and reporting to demonstrate compliance with NSW Government and agency cyber security obligations.
• Build strong relationships with internal stakeholders, vendors and service providers to drive positive security outcomes and remediation activities.

Skills

Cyber security operations

Threat detection

Incident response

Vulnerability management

Security monitoring

Cloud security

DevSecOps

CI/CD

Documentation

Stakeholder collaboration

Education

Cyber security degree

Tools

Microsoft Sentinel

Splunk

SIEM

Azure Security

DevSecOps tooling

CI/CD pipelines

Job description

• Role type: Temporary Full-Time (35hpw) opportunity for up to 12 months, with the possibility of ongoing.
• Salary: Clerk Grade 9/10 - Package $133,348 to $146,945 base p/a plus superannuation and annual leave loading.
• Location: Sydney CBD, with hybrid working conditions and a 50% office presence required. Flexible working arrangements may be available in line with the DCS Flexible Working Policy.

About the role

We're seeking an experienced cyber security professional to join the ID Support team within Cyber Security NSW. This is an exciting opportunity to play a critical role in protecting government systems, services and sensitive information that support the people of NSW. Working within a collaborative and high-performing cyber security environment, you'll contribute to the security, resilience and compliance of critical digital services through threat monitoring, incident response, vulnerability management and security operations. As a technical specialist, you'll work across a diverse technology landscape, partnering with delivery, infrastructure and cyber security teams to identify emerging threats, strengthen security controls and continuously improve security outcomes. Your work will directly support the secure operation of services that make a meaningful difference to the community.

Key responsibilities

• Monitor, investigate and respond to cyber security alerts, incidents and suspicious activity across enterprise environments.
• Conduct technical investigations and support cyber incident response activities to minimise risk and improve resilience.
• Lead and coordinate vulnerability management activities, including risk assessment, remediation tracking and stakeholder reporting.
• Implement, monitor and validate operating system, application and infrastructure patching to maintain strong security posture.
• Maintain and optimise security monitoring, logging and alerting capabilities to support threat detection and response.
• Support the operation, integration and continuous improvement of security technologies across cloud, infrastructure and application environments.
• Contribute to the secure operation of cloud platforms, DevSecOps pipelines, CI/CD environments and associated security tooling.
• Identify cyber security risks and vulnerabilities and provide practical recommendations to strengthen security controls.
• Develop and maintain operational procedures, technical documentation and security runbooks.
• Support internal and external audits, assurance activities and compliance assessments.
• Maintain evidence and reporting to demonstrate compliance with NSW Government and agency cyber security obligations.
• Build strong relationships with internal stakeholders, vendors and service providers to drive positive security outcomes and remediation activities.

About you

To be successful in this role, you'll bring a combination of technical cyber security expertise, analytical thinking and a proactive approach to managing security risks.

• Cyber security operations, security monitoring and threat detection.
• Investigating cyber security incidents, alerts and suspicious activity.
• Vulnerability management, remediation coordination and risk assessment.
• Security patch management and validation across enterprise environments.
• Analysing security logs, events and monitoring data to identify threats and security weaknesses.
• Supporting cloud security operations and modern technology environments.
• Working within DevSecOps, CI/CD and secure software delivery practices.
• Developing technical documentation, procedures and operational security artefacts.
• Collaborating with technical and non-technical stakeholders to deliver security outcomes.
• Tertiary qualifications in cyber security, information security, information technology or a related discipline are highly regarded. Equivalent industry experience will also be considered.
• Ability to obtain and maintain a Negative Vetting Level 1 (NV1) security clearance.
• Successful completion of pre-employment screening requirements, including a National Police Check.
• Understanding of infrastructure and architecture, with the ability to identify and challenge security configurations, integrations, and operational risks, and translate these into actionable guidance that supports secure, compliant system maintenance and control maturity necessary to satisfy strict compliance frameworks.
• Demonstrated hands-on experience supporting, administering or operating secure and compliant enterprise technology environments.

Pre-employment Checks and Conditions of Employment

The preferred candidate will be required to satisfactorily complete pre-employment screening, including a National Criminal History Check and any other probity or suitability assessments determined by the Department. Appointment and continued employment are subject to the granting and maintenance of the required security clearance.

Why work for Cyber NSW?

• Flexible working: We offer a broad range of flexible working arrangements.
• Career development: Ongoing learning and development opportunities through expert-led sessions, online training and professional development opportunities.
• Work-life balance: Flex time accrual for extra hours worked (for non-Exec roles) based on a 35-hour work week.
• Wellbeing support: Access to employee assistance programs, including EAP, Fitness Passport, and wellbeing initiatives.
• Inclusive culture: Staff led Employee Resource Groups (ERGs) including DCS Pride, Young Professionals Network and more.
• Leave entitlements: Four weeks annual leave and paid sick leave, carer's leave, and long service leave.

About the team

Our Governance, Risk, Compliance and Assurance team protects and strengthens the security, integrity and resilience of ID Support NSW services. As part of a multidisciplinary assurance function, this role provides technical cyber security expertise across security operations, threat monitoring, incident response, vulnerability management, cloud security and secure platform operations. The team supports the ongoing uplift and assurance of security controls, identifies and responds to emerging cyber threats, drives remediation activities, and provides technical security advice to projects and operational teams. Working closely with technology stakeholders and, where required, partnering with the CISO function, the team helps ensure systems and services remain secure, compliant and aligned with NSW Government security obligations and industry best practice. ID Support NSW, within Cyber Security NSW, supports individuals and organisations prevent, respond and recover to data breaches. The team provides the public with specialised remediation support to help individuals secure their identity following a compromise and delivers public-facing education and awareness programmes that foster privacy and identity resilience across NSW, as well as leading the NSW Government response to data breaches.

About Cyber Security NSW

Cyber Security NSW provides centralised services and all-of-government leadership to drive a cyber-resilient NSW Government that can safeguard the confidentiality, integrity and availability of government systems, services and data for NSW communities. Cyber Security NSW is an all-of-government function located within Digital NSW in the Department of Customer Service. Learn more about Our Vision and Cyber Security NSW. ID Support NSW is a nation-leading business unit in Cyber Security NSW that deliver public-facing advisory services dedicated to assisting victims of identity theft and crime and supports the NSW Governments data breach response. With recent data breaches and increasing fraud, identity resilience is key to preventing misuse. Learn more about ID Support NSW and help shape how identities are protected and remediated in NSW.

Closing Date

Thursday 12 November 2026 @ 11:59PM

Desired Skills and Experience

Cyber Security, Information Security, Security Operations, SOC, Incident Response, Threat Detection, Vulnerability Management, Risk Assessment, Microsoft Sentinel, SIEM, Splunk, Cloud Security, Azure Security, DevSecOps, CI/CD, Security Compliance, GRC, ISO 27001, ISM, Essential Eight.