Cyber Incident Response Analyst

About Us
The Department of Government Services (DGS) was established on 1 January 2023 to improve everyone's experience of doing business and interacting with the Victorian government. We bring important day-to-day services together in one department to make things easy and seamless for Victorians and businesses. We are doing this by connecting and digitising our systems and platforms across state and local government as well as streamlining our corporate and procurement services.

The Digital and Government Services group
Digital and Government Services support the Minister for Government Services and help to set the strategic direction and reform agenda for government services across the Victorian Public Service.

Digital and Government Services provide whole of government policy leadership across digital services and transformation, technology, data, cybersecurity, telecommunications, identity policy, records management and shared services (such procurement, accommodation and common platforms).

The group engages with DGS’s customer departments and agencies, as well as other departments and agencies, to help shape the priorities of the department and deliver reform.

The Cyber Security and Digital Resilience Division

The Cyber Security and Digital Resilience Division (CSDRD) is responsible for leading and overseeing government’s digital resilience, and preparedness and response to cyber security risks, including:

·         Leading the Victorian Government’s cyber security operations

·         Working with departments and agencies to continue to build the Victorian Government’s cyber security resilience capability

·         Working with departments and agencies to improve the protection of data assets across the Victorian Public Sector

·         Shaping whole of government governance arrangements, developing best practice, and providing assurance about the management of cyber security and data protection risks

·         Improving the resilience of Victoria’s telecommunications infrastructure to support digital resilience and inclusion

About the role
The Cyber Incident Response Analyst supports the investigation and remediation of cyber security incidents affecting the Victorian Government, providing sound advice and guidance on the containment, eradication, investigation and remediation of cyber security incidents.

This role is required to investigate information, analyse and resolve cyber incidents, and support senior practitioners with incident response activities for major to emergency level cyber incidents impacting Victorian government organisations. The position participates in an on-call roster and requires the ability to perform intermittent after-hours work.

The position requires initiative, professional drive and integrity - including the ability to manage competing deadlines during periods of heightened operational tempo. A successful candidate will have basic knowledge and exposure to digital forensics and incident response (DFIR).

Key Accountabilities

• Assist the technical response and investigation into cyber security incidents affecting Victorian Government organisations in partnership with government and private industry stakeholders.
• Support whole-of-government coordination functions to achieve timely and effective responses to cyber security incidents affecting Victorian Government organisations.
• Assist with the development of advice to stakeholders on effective risk mitigation and incident response strategies to minimise harm to the Victorian Government.
• Contribute to the continuous improvement of team plans, policies and procedures relating to cyber threat intelligence and incident response functions.
• Establish and maintain productive working relationships with cyber security stakeholders across government and private industry nationally.
• Support DGS in performing its emergency management functions as the Control Agency for cyber security emergencies in Victoria.
• Participate in an on-call roster and undertake intermittent after hours work in relation to cyber security incidents or threats against Victorian Government.
• Other duties as directed that are not listed in the position description, but which are consistent with a position of this grade and skills requirement.
  
  

Mandatory requirements

• The ability to successfully acquire and maintain a NEGATIVE VETTING 1 level security clearance in Australia (requires Australian citizenship).  
• Participation in an on-call roster and the ability to perform intermittent after-hours work in response to incidents or emergencies.

This is an ongoing position. The position is only open to applicants with relevant rights to work in Australia. 

For more information and the key selection criteria, please see the Position Description. 

How to apply:
Apply before the advertised closing date 11:59pm on Wednesday, 11 November 2026. All applications should include: 

• a resume; and  
• a cover letter which addresses the key selection criteria (within three pages).
  
  

Other relevant information:
To be eligible for appointment to this role, applicants will possess corresponding work rights for the advertised employment period. Appointment to an ongoing role is only available to an Australian/New Zealand citizen or an Australian Permanent Resident.  Preferred candidates will be required to complete a Pre-employment Declaration and Consent Form. Employment of successful candidates will be subject to a National Police Check.  

The department is committed to providing and maintaining a working environment which is safe and without risk to the health of its employees and clients and consistent with the department's obligations under the Occupational Health and Safety Act 2004 (OH&S Act), to support this DGS has a COVID-19 Vaccination policy which strongly recommends all DGS employees be fully vaccinated.   

DGS actively promotes diversity, inclusion and an equal opportunity workplace. All roles at DGS can be worked flexibly, however it may differ from role to role.