APS6 - Cyber Security Analyst, Strategy, Architecture & Cyber Security

The opportunity we have available

Organised within the Chief Operating Officer Group within the department, Information Technology & Data Division’s (ITDD) purpose is to connect people, data, and technology, empowering the department to excel. ITDD is responsible for the consolidated provision and support of stable and secure IT Systems, applications and services to all department users across all States and Territories, including Indian Ocean Territories and Norfolk Island, as well as supporting seven Ministerial offices, and coordination with portfolio entities. ITDD provides the digital collaboration and communications tools necessary to connect a geographically dispersed workforce and to optimise hybrid working arrangements. We manage industry and public facing digital systems, deliver desktop services, oversee cyber security, and provide data, AI, and information management advice to over 2,400 staff, supporting over 30 office locations across Australia.

This role is based in the Cyber Security Team within the Strategy, Architecture & Cyber Security Branch. The team protects departmental information, systems and services through cyber security operations, incident response, assurance, monitoring and ongoing capability uplift. The successful candidate will contribute to strengthening the department’s cyber resilience and delivering modern, sustainable security capabilities.

What you will do

As a Cyber Security Analyst, you will contribute to the department’s day-to-day cyber security operations, assurance activities and ongoing capability uplift. You will work across Microsoft security platforms and other enterprise technologies to investigate security events, assess cyber risk, provide practical advice and help strengthen the department’s resilience.

The role requires sound judgement, attention to detail and the ability to explain complex security issues clearly to technical and non-technical stakeholders. You will manage competing priorities, maintain accurate records and escalate significant risks when required.

Your key responsibilities will include:

• Security monitoring and incident response - monitor, triage and investigate security alerts and identity-risk detections; undertake appropriate response actions; and document findings, decisions and outcomes.
• Technical investigations and activity reviews - analyse security, audit and user-activity information to support cyber incidents, insider risk matters and other authorised enquiries, while maintaining privacy, procedural fairness and evidence-handling requirements.
• Security assurance and advice - assess applications, systems, projects and proposed changes; identify security risks and control gaps; and provide practical, risk-based advice to business and technical stakeholders.
• Security control improvement - help design, configure, test and improve preventative, detective and responsive controls across Microsoft 365, cloud, endpoint, identity and network environments.
• Threat and vulnerability management - use threat intelligence, vulnerability information and attack-surface visibility to identify emerging risks, support prioritisation and recommend proportionate action.
• Insider risk capability - contribute to the development and operation of privacy-aligned insider risk monitoring, triage, case management, governance and reporting processes.
• Operational improvement - develop playbooks, procedures, automation, reporting and other repeatable ways of working that improve consistency, efficiency and service resilience.
• Stakeholder engagement and awareness - communicate cyber risks in clear language, support security awareness activities and work collaboratively with technical teams, business areas and related assurance functions.

The role offers opportunities to deepen technical expertise and contribute to the continued improvement of the department’s cyber security capability.

Inherent requirements for the role

The successful candidate will be able to demonstrate their capability against the APS6 Work level standards and possess the following core capabilities:

• Experience in cyber security operations, technical assurance, investigations or a related discipline.
• Develop and maintain productive working relationships with colleagues, stakeholders and service providers to achieve positive security outcomes.
• Communicate effectively, both verbally and in writing, including the ability to explain complex security issues, provide practical advice and influence decision-making among technical and non-technical stakeholders.
• Analyse complex information from a variety of sources, identify risks and trends, and exercise sound judgement to support evidence-based decisions and recommendations.
• Manage competing priorities in a dynamic environment, delivering quality outcomes while maintaining attention to detail and appropriate risk management practices.
• Demonstrate a growth mindset, including a willingness to learn, adapt and continuously develop technical and professional capability, while contributing to a culture of learning and improvement.
• Identify opportunities to improve security controls, processes and services, and contribute to the development of more efficient, consistent and sustainable ways of working.
• Contribute to a positive and professional team culture through collaboration, accountability, integrity and a commitment to high-quality outcomes.
• Handle sensitive information appropriately and maintain accurate records in accordance with privacy, security, procedural fairness and evidence-handling requirements.

Desirable requirements

Experience with Microsoft security technologies such as Defender, Entra, Sentinel or Purview will be highly regarded.

Cultural capability requirement

The department believes every role contributes to cultural safety and that building staff cultural capability helps us deliver better policies, programs and services for First Nations people and the broader Australian community. Candidates will be required to demonstrate their willingness to develop their cultural capability as part of the assessment process. In making it a requirement across all roles in our department, we are taking a practical step in delivering our commitments under the Our Stories on Country Agreement and the Diversity, Equity and Inclusion Strategy 2025–28.

As an APS6 you will be expected to:

• Consider the cultural context and implications of work area outcomes.
• Engage respectfully with Aboriginal and/or Torres Strait Islander stakeholders, building trusted relationships.
• Communicate respectfully and seeks appropriate cultural input to inform decisions.

Eligibility requirements

Employment with the Department of Infrastructure, Transport, Regional Development, Communications, Sport and the Arts is subject to conditions prescribed within the Public Service Act 1999 including:

• Citizenship: candidates must be an Australian citizen at the time of submitting your application.
• Health Assessment: The preferred candidate may be required to undergo a medical examination conducted by the department’s preferred medical provider.
• Security Clearance: The successful candidate must be able to obtain and/or maintain a security clearance at Negative Vetting 1 Level. You must be willing to disclose all relevant and required information. You must have lived in Australia, or have a checkable background, for at least the preceding five years for Baseline Vetting clearances. More information on the security clearance vetting process is available on the Australian Government Security Vetting Agency (AGSVA) website.
• Police check: The successful candidate must complete an Australian Federal Police criminal history check.
• Integrity and Performance check: The successful candidate must satisfy the requirements in an Integrity and Performance check which is completed by your most recent employer.