Senior Cyber Incident Response Analyst

About Us
The Department of Government Services (DGS) was established on 1 January 2023 to improve everyone's experience of doing business and interacting with the Victorian government. We bring important day-to-day services together in one department to make things easy and seamless for Victorians and businesses. We are doing this by connecting and digitising our systems and platforms across state and local government as well as streamlining our corporate and procurement services.

The Digital and Government Services Group 
Digital and Government Services support the Minister for Government Services and help to set the strategic direction and reform agenda for government services across the Victorian Public Service.

Digital and Government Services provide whole of government policy leadership across digital services and transformation, technology, data, cybersecurity, telecommunications, identity policy, records management and shared services (such procurement, accommodation and common platforms).

The group engages with DGS’s customer departments and agencies, as well as other departments and agencies, to help shape the priorities of the department and deliver reform.

About the Role
The Senior Incident Response Analyst is a key member of the Victorian Government Cyber Incident Response Service (CIRS). Reporting to the Senior Manager CIRS, the role is responsible for leading and coordinating investigations into cyber security incidents to support response activities, in partnership with government and private industry stakeholders.

The role leads the technical response of cyber incidents that affect Victorian public sector entities, providing stakeholders with high-quality advice to identify, eradicate, contain and remediate cyber incidents and threats impacting the Victorian Government.

The function provides leadership to a small Incident Response team. It supports the Senior Manager to deliver a sustainable, high-performing service, including the provision of reporting and expert advice to senior executives and key stakeholders.

The position requires strong initiative, professional drive and integrity - including the ability to manage competing deadlines during periods of heightened operational tempo.

Key Accountabilities

• Manage a small team to lead investigations into cyber security incidents to support successful response activities, in partnership with government and private industry stakeholders.
• Initiate and support whole-of-government coordination functions to achieve timely and effective responses to cyber security incidents affecting Victorian Government organisations.
• Advise stakeholders on effective risk mitigation and incident response strategies to minimise harm to the Victorian Government.
• Contribute to the continuous improvement of team plans, policies and procedures relating to cyber incident response functions.
• Support operational activities relating to cyber threat intelligence, digital forensics and consequence management functions.
• Support DGS in performing its emergency management functions as the Control Agency for cyber security emergencies in Victoria—including performing various roles under the AIIMS Incident Management System.
• Other duties as required to support the programs of work for the Cyber Security and Digital Resilience Division.

Mandatory Requirements

• The ability to successfully acquire and maintain a NEGATIVE VETTING 1 level security clearance in Australia (requires Australian citizenship).  
• Participation in an on-call roster and the ability to perform intermittent after-hours work in response to cyber security incidents or issues.  
  
  

This is an ongoing position. This position is only open to applicants with Australian citizenship, due to security clearance requirements.

For more information and the key selection criteria, please see the Position Description.

How to apply:
Apply before the advertised closing date 11:59pm on Monday, 6 July 2026. All applications should include: 

• a resume; and  
• a cover letter which addresses the key selection criteria (within three pages).
  
  

Other relevant information:
To be eligible for appointment to this role, applicants will possess corresponding work rights for the advertised employment period. Appointment to an ongoing role is only available to an Australian/New Zealand citizen or an Australian Permanent Resident.  Preferred candidates will be required to complete a Pre-employment Declaration and Consent Form. Employment of successful candidates will be subject to a National Police Check.