Data Security Analyst

About the role At NESA, join our newly established Cybersecurity, Information Assurance, and Data Protection team and play a key role in safeguarding critical information across the organisation. As a Data Security Analyst, you will be responsible for implementing and managing technical safeguards, maintaining secure configurations, and ensuring compliance to protect critical data assets. Responsibilities Design and implement technical data protection controls such as encryption, tokenisation, masking, and secure data transfer in collaboration with ICT and vendors. Ensure secure configuration and monitoring of storage, backup, and archival systems with ICT. Define and support Data Loss Prevention (DLP) policies for endpoints, cloud services, and email, coordinating deployment across the business. Provide guidance on access control models (RBAC) to promote least privilege principles. Collaborate with Identity and Access Management to integrate data access controls with enterprise identity systems. Advise on encryption practices for data at rest, in transit, and in use, including standards‑aligned key management. Monitor data security telemetry, support investigations of suspicious activity, and assist with remediation strategies. Support the deployment of data discovery and classification tools to govern sensitive data, aligned with regulatory and organisational requirements. Lead security awareness initiatives focused on safe data handling. Qualifications Balance service delivery demands with robust security practices in a dynamic environment. Strong organisational skills to manage conflicting and changing priorities while meeting service standards. Current knowledge across a range of technical and security streams to provide expert advice. An understanding of data protection technologies such as encryption, tokenisation, masking, and secure transfer methods. Experience with data discovery, classification, and governance practices to protect sensitive data. Knowledge of compliance frameworks such as ISO and relevant privacy legislation. Tertiary qualifications in a relevant field or equivalent experience. A current NSW Working with Children Check (WWCC) clearance for paid employment is required before commencing in this role. The cost is the responsibility of the selected applicant. Application Process Select apply and attach a résumé (maximum 5 pages) and a cover letter (maximum 2 pages). Also address the two targeted questions below in your online application: Describe a situation where you identified a potential breach of data security or a compliance issue. How did you act to address the issue while maintaining professional integrity, and what did you learn from the experience? Provide an example of when you had to analyse complex technical information and communicate your findings to non‑technical stakeholders. How did you ensure your recommendations were understood and implemented effectively? Equal Opportunity We particularly welcome applications from Aboriginal and Torres Strait Islander people, people with a disability, people of all ages, genders, cultural and linguistic backgrounds, the LGBTQIA+ community, veterans and refugees. Visa sponsorship is not available for this position. For ongoing roles, you must be an Australian or New Zealand citizen or an Australian Permanent Resident. Australian Temporary Residents may be considered for a fixed‑term contract for the length of their visa, depending on the requirements of the hiring area and the position. If you need reasonable adjustments for the recruitment process and workplace, please reach out to the contact person above. Close date : 9 December Thank you for your interest; we look forward to receiving your application. #J-18808-Ljbffr