Data Security Analyst

Job Description - Data Security Analyst (0000B4PL) Overview Join us to make a difference for all students in NSW Data Security Analyst - 0000B4PL About the role Are you ready to protect our information and drive security forward? At NESA, join our newly established Cybersecurity, Information Assurance, and Data Protection team and play a key role in safeguarding critical information across the organisation. As a Data Security Analyst, you will play a key role in protecting sensitive information and ensuring compliance with data security standards across the organisation. This role is responsible for implementing and managing technical safeguards, maintaining secure configurations, and ensuring compliance to protect critical data assets. This is an exciting opportunity for someone who thrives on balancing service delivery with strong security practices, while working collaboratively with ICT, data governance, and privacy teams. Responsibilities Designing and implementing technical data protection controls such as encryption, tokenisation, masking, and secure data transfer in collaboration with ICT and vendors. Ensuring secure configuration and monitoring of storage, backup, and archival systems with ICT. Defining and supporting Data Loss Prevention (DLP) policies for endpoints, cloud services, and email, coordinating deployment across the business. Providing guidance on access control models (RBAC) to promote least privilege principles. Collaborating with Identity and Access Management to integrate data access controls with enterprise identity systems. Advising on encryption practices for data at rest, in transit, and in use, including standards-aligned key management. Monitoring data security telemetry, supporting investigations of suspicious activity, and assisting with remediation strategies. Supporting the deployment of data discovery and classification tools to govern sensitive data, aligned with regulatory and organisational requirements. Supporting data protection efforts by leading security awareness initiatives focused on safe data handling. Qualifications and ideal candidate The ability to balance service delivery demands with robust security practices in a dynamic environment. Strong organisational skills to manage conflicting and changing priorities while meeting service standards. Current knowledge across a range of technical and security streams to provide expert advice. An understanding of data protection technologies such as encryption, tokenisation, masking, and secure transfer methods. Experience with data discovery, classification, and governance practices to protect sensitive data. Knowledge of compliance frameworks such as ISO 27001 and relevant privacy legislation. Tertiary qualifications in a relevant field or equivalent experience. A valid Working with Children Check (WWCC) clearance for paid employment (prior to commencement, not required at application). At the NSW Education Standards Authority (NESA) we work with the NSW community to drive improvements in student achievement. We achieve this by supporting all school sectors with high-quality syllabuses, assessment (including managing the HSC and NAPLAN), teaching standards (e.g., accrediting teachers) and school environments (including setting and monitoring school standards). Application process To find out more about the important work we do for NSW visit our website. Ready to join us? Select apply and attach an up-to-date résumé (maximum 5 pages) and a cover letter (maximum 2 pages). Also address the 2 targeted questions below in your online application: Describe a situation where you identified a potential breach of data security or a compliance issue. How did you act to address the issue while maintaining professional integrity, and what did you learn from the experience? Provide an example of when you had to analyse complex technical information and communicate your findings to non-technical stakeholders. How did you ensure your recommendations were understood and implemented effectively? If you need reasonable adjustments for the recruitment process and workplace, please reach out to the contact person above. Close date: 9 December 2025 at 11.59pm AEST Thank you for your interest, we look forward to receiving your application. We particularly welcome applications from Aboriginal and Torres Strait Islander people, people with a disability, people of all ages, genders, cultural and linguistic backgrounds, the LGBTQIA+ community, veterans and refugees. Visa sponsorship is not available for this position . For ongoing roles, you must be an Australian or New Zealand citizen or an Australian Permanent Resident. Australian Temporary Residents may be considered for a fixed term contract for the length of their visa, depending on the requirements of the hiring area and the position. A Talent Pool (valid for 18 months) may be created for future ongoing and temporary roles. Location Sydney Region-Sydney City Work Type Full-time Number of Positions 1 Remuneration Total Remuneration Package: $113,574 - $125,720 plus employer's contribution to superannuation and annual leave loading. Closing Date 9 December 2025, 12:59 PM AEST Job Category Information and communications technology We pay respect to the Traditional Custodians and First Peoples of NSW, and acknowledge their continued connection to their country and culture. #J-18808-Ljbffr