APS6 - Cyber Security Analyst, Strategy, Architecture & Cyber Security

Australian Department of Infrastructure, Transport, Regional Development, Communications, Sport and the Arts – Canberra ACT

Organised within the Chief Operating Officer Group within the department, Information Technology & Data Division’s (ITDD) purpose is to connect people, data, and technology, empowering the department to excel. ITDD is responsible for the consolidated provision and support of reliable and secure IT Systems, applications and services to all department users across all States and Territories, including Indian Ocean Territories and Norfolk Island, as well as supporting seven Ministerial offices, and coordination with portfolio entities. ITDD provides the digital collaboration and communications tools necessary to connect a geographically dispersed workforce and to optimise hybrid working arrangements. We manage industry and public facing digital systems, deliver desktop services, oversee cyber security, and provide data, AI, and information management advice to over 2,400 staff, supporting over 30 office locations across Australia.

This role is based in the Cyber Security Team within the Strategy, Architecture & Cyber Security Branch. The team protects departmental information, systems and services through cyber security operations, incident response, assurance, monitoring and ongoing capability uplift. The successful candidate will contribute to strengthening the department’s cyber resilience and delivering modern, sustainable security capabilities.

What you will do

As a Cyber Security Analyst, you will contribute to the department’s day-to-day cyber security operations, assurance activities and ongoing capability uplift.



You will work across Microsoft security platforms and other enterprise technologies to investigate security events, assess cyber risk, provide practical advice and help strengthen the department’s resilience.

The role requires sound judgement, attention to detail and the ability to explain complex security issues clearly to technical and non-technical stakeholders. You will manage competing priorities, maintain accurate records and elevate significant risks when required.

Your key responsibilities will include:

- Security monitoring and incident response - monitor, triage and investigate security alerts and identity-risk detections; undertake appropriate response actions; and document findings, decisions and outcomes.
- Technical investigations and activity reviews - analyse security, audit and user-activity information to support cyber incidents, insider risk matters and other authorised enquiries, while maintaining privacy, procedural fairness and evidence-handling requirements.
- Security assurance and advice - assess applications, systems, projects and proposed changes; identify security risks and control gaps; and provide practical, risk-based advice to business and technical stakeholders.
- Security control improvement - help design, configure, test and improve preventative, detective and responsive controls across Microsoft 365, cloud, endpoint, identity and network environments.




- Threat and vulnerability management - use threat intelligence, vulnerability information and attack-surface visibility to identify emerging risks, support prioritisation and recommend proportionate action.
- Insider risk capability - contribute to the development and operation of privacy-aligned insider risk monitoring, triage, case management, governance and reporting processes.
- Operational improvement - develop playbooks, procedures, automation, reporting and other repeatable ways of working that improve consistency, efficiency and service resilience.
- Stakeholder engagement and awareness - communicate cyber risks in clear language, support security awareness activities and work collaboratively with technical teams, business areas and related assurance functions.

The role offers opportunities to deepen technical expertise and contribute to the continued improvement of the department’s cyber security capability.

Inherent requirements for the role

The successful candidate will be able to demonstrate their capability against the APS6 Work level standards and possess the following core capabilities:

- Experience in cyber security operations, technical assurance, investigations or a related discipline.
- Develop and maintain productive working relationships with colleagues, stakeholders and service providers to achieve positive security outcomes.
- Communicate effectively, both verbally and in writing, including the ability to explain complex security issues, provide practical advice and influence decision-making among technical and non-technical stakeholders.
- Analyse complex information from a variety of sources, identify risks and

📌 Cyber Security Analyst, Strategy, Architecture & Cyber Security (Canberra)
🏢 Australian Department of Infrastructure, Transport, Regional Development, Communications, Sport and the Arts
📍 Canberra