Are you an experienced regulatory compliance leader with a passion for information security, governance and large-scale program delivery?
The Department of Education is seeking a highly motivated Security Regulatory Manager to lead enterprise-wide information security compliance initiatives and deliver the annual Victorian Protective Data Security Standards (VPDSS) reporting program across one of Victoria's largest and most complex public sector environments. This is an opportunity to influence regulatory compliance outcomes at scale, working with senior leaders, regulators and stakeholders across over 1,600 schools and education entities to strengthen information security governance, improve compliance maturity and support the protection of sensitive information across the Victorian education system.
About the Role
As Security Regulatory Manager, you will provide strategic leadership for the department's VPDSS reporting program and broader information security regulatory obligations. You will oversee the design, delivery and continuous improvement of VPDSS reporting frameworks, and stakeholder engagement strategies that strengthen compliance maturity and support effective cyber risk management across a highly distributed environment.
You will work closely with senior executives, regulators, government agencies and education sector stakeholders to ensure the department continues to meet its regulatory obligations and maintain high standards of information security governance.
About Us
The Information Management and Technology Division (IMTD) supports one of the largest technology environments in Victoria, serving more than 1,600 government schools, Early Learning Education, approximately 50,000 teachers and 650,000 students. The division delivers secure, reliable and innovative digital services that enable educational excellence across the state.
The Information Security Branch plays a critical role in safeguarding the department's information assets and providing assurance to executive leadership, government and regulators that strategic information security risks are effectively managed.
What We're Looking For




We're seeking an experienced regulatory compliance and program delivery leader with the ability to drive outcomes in complex environments.
You will bring: * Demonstrated experience leading large-scale VPDSS reporting program across complex and distributed entities across Victoria. * Strong understanding of information security, cyber security and the VPDSS framework and obligations. * Solid program management capabilities, including planning, governance, risk management and delivery oversight. * Exceptional stakeholder engagement and influencing skills, with experience working across executive, operational and external stakeholder groups. * Excellent communication skills, with the ability to prepare executive briefings, strategic communications and regulatory reporting. About You
To be successful in this role, you will bring:
Essential * Relevant tertiary qualifications in cyber security, information technology, governance, risk management, business or a related discipline. * Professional certifications such as CISSP, CISM, CRISC or equivalent. * Project, program or portfolio management certification. * Demonstrated experience leading large-scale information security compliance or regulatory programs within complex and geographically dispersed environments. * Exceptional stakeholder engagement and influencing skills, with the proven ability to achieve outcomes across executive, technical and operational audiences. * Strong written and verbal communication skills, including experience preparin Desirable * Demonstrated success driving regulatory uplift initiatives and foster a strong culture of compliance across the organisation. * Experience supporting audits, regulatory reviews and external assurance activities. * Experience with governance,



risk and compliance (GRC) platforms and reporting solutions. Why Join Us?
This is a unique opportunity to influence information security and regulatory compliance across Victoria's education sector. You will lead a high-profile program with significant executive visibility, shape compliance outcomes across more than 1,600 entities and contribute directly to protecting the information and privacy of students, staff and communities.
How to Apply
Applications should include: * A current résumé; and * A cover letter outlining your suitability for the role and highlighting your experience in information security governance, regulatory compliance, stakeholder management and large-scale program delivery. For further information about this opportunity, please refer to Role Statement 2026 - Regulatory Manager, ISB.
The department values diversity and inclusion in all forms - gender, religion, ethnicity, LGBTIQ+, disability and neurodiversity. Aboriginal and Torres Strait Islander candidates are strongly encouraged to apply. For more information about our work, working for the Department, diversity and inclusion, and our employment conditions visit the Department website and our Diversity and Inclusion page
Applicants requiring adjustments can contact the nominated contact person.
Information about the Department of Education's operations and employment conditions can be located at www.education.vic.gov.au.
For further information pertaining to the role, please contact Robert Munoz via [email protected]. Preferred applicants may be required to complete a police check and may be subject to other pre-employment checks. Information provided to the Department of Education will be treated in the strictest confidence.
Please let us know via phone or email if you require any adjustments to ensure your full participation in the recruitment process or if you need the ad or any attachments in an accessible format (e.g large print) due to any viewing difficulties or other accessibility requirements.
Applications close 11:59pm on 19 November 2026.

📌 Security Regulatory Manager (Melbourne)
🏢 Victorian Government
📍 Melbourne