Information Security Officer

Company description:

About Us

The Department of Government Services (DGS) was established on 1 January 2023 to improve everyone's experience of doing business and interacting with the Victorian government.  We bring important day-to-day services together in one department to make things easy and seamless for Victorians and businesses.  We are doing this by connecting and digitising our systems and platforms across state and local government as well as streamlining our corporate and procurement services.

You can find out more about our Ministers, leadership and entities here: Department of Government Services.

About the Group

The Operations Group delivers frontline customer services to Victorians and the public service. It maintains the foundational digital infrastructure and platforms that support efficient, secure and reliable service delivery.

Job description:

About the Role

The Information Security Officer helps protect DGS information and systems from security threats by applying information security principles, understanding business processes, and supporting security initiatives. The role requires strong stakeholder engagement, analytical skills, attention to detail and effective communication.

Key Accountabilities

• Support investigations into suspected information security policy breaches and cyber incidents.

• Assist with the delivery of cyber security projects, programs and initiatives.

• Participate in incident response and disaster recovery exercises and simulations.

• Assist with vulnerability assessments and penetration testing, and remediation activities.

• Implement security policies and awareness initiatives, while contributing to risk reporting, briefings and compliance activities.

About You

To be successful in this role, you will ideally possess the following attributes:

• A minimum of 1 years' experience in a technical or Security Operations role.

• Demonstrated understanding of information security principles, issues, industry standards and security operation practices.

• Qualifications in relevant field such as Information Security, Information Technology, or equivalent industry experience.

• A sound understanding of information security, IT risks and security controls.

• Familiarisation with relevant standards including ISO27001, NIST CSF, ASD Essential 8, SOC1 and 2, Victorian Protective Data Security Standards (VPDSS), and the Privacy and Data Protection Act 2014 (Vic) are highly favoured.

This role is ongoing and is only open to applicants with relevant rights to work in Australia.

For more information, please see the  Position Description

How to apply

Apply before the advertised closing date 11:59pm on 20 August 2026. All applications should include:

·       a resume; and

·       a cover letter which addresses the key selection criteria (within three pages).

Other relevant information

To be eligible for appointment to this role, applicants will possess corresponding work rights for the advertised employment period. Appointment to an ongoing role is only available to an Australian/New Zealand citizen or an Australian Permanent Resident.  Preferred applicants will be required to undertake pre-employment screening. DGS actively promotes diversity, inclusion and an equal opportunity workplace. We welcome applicants from all diverse backgrounds, including people with disabilities and Aboriginal and Torres Strait Islander peoples. All roles at DGS can be worked flexibly, however it may differ from role to role.