Bachelor of Cyber Security

The Bachelor of Cyber Security at Griffith University is a three-year undergraduate degree built around how systems actually get attacked, and how you stop that happening. You'll study networks, operating systems, programming and cryptography, then move into areas like digital forensics, incident response, security governance and risk assessment. Griffith runs this through its School of Information and Communication Technology, and the degree sits alongside its broader computing and IT offerings, so you're studying in a technical environment rather than a standalone security silo.

How the degree is structured

Australian bachelor degrees are normally three years of full-time study, and this one follows that pattern. The academic year is split into trimesters at Griffith, with each unit of study carrying a set number of credit points. You accumulate credit points across the degree until you meet the total required to graduate. Core units cover the fundamentals of computing and security, and you choose electives or a major stream to shape where you end up, network defence, forensics, governance, or a more general IT path. Some programs include a capstone unit in the final year where you pull everything together on a real problem, often with an industry partner. Confirm the exact unit list, credit point totals and any capstone or placement requirements on the official Griffith course page, because they can change.

What you actually learn

You'll learn to think like someone trying to break in, and then like someone whose job is to stop them. That means writing and reading code, understanding how networks talk to each other, spotting weaknesses in systems, and knowing what to do when something goes wrong. You'll cover cryptography and how it's applied, security policy and risk, and the legal and ethical side of handling other people's data. Group work is common, security is a team sport in practice, and you'll present findings, write reports and defend your reasoning. By the end you should be able to assess a system, explain the risks in plain language, and recommend what to do about them.

Who it suits

This suits school leavers with a decent maths and IT background, and also people already working in IT who want to specialise. You don't need to be a coder already, but you do need to be comfortable with logic and problem-solving. If you like the idea of work that changes constantly and where the adversary is real, it's a good fit. International students should check the English requirements carefully, IELTS Academic 6.0–6.5 overall is the usual standard for undergraduate courses at Australian universities, though some fields ask for more. Griffith accepts TOEFL iBT, PTE Academic, Cambridge C1 Advanced and its own English programs as equivalents. The Department of Home Affairs also sets its own English threshold for the Student visa, which is separate from the university's requirement. While studying, a student visa generally allows up to 48 hours of work per fortnight during term. After graduating, the Temporary Graduate visa (subclass 485) post-study work stream lets eligible graduates stay and work in Australia for a period that depends on the qualification level and other factors. Tuition is published on the CRICOS register under course code 114026J, check there and on Griffith's official page for current fees, intake dates and entry requirements.

• Cyber security analyst, monitoring networks, investigating alerts and responding to incidents in banks, insurers, government agencies and managed security providers.
• Security engineer, building and hardening systems, configuring firewalls and identity controls, often in cloud and infrastructure teams.
• Digital forensics analyst, recovering and examining evidence from devices and networks, working with law enforcement, consultancies or corporate investigation teams.
• Penetration tester, authorised attack simulation for consultancies and internal security teams, finding weaknesses before criminals do.
• Security consultant, advising organisations on risk, compliance and controls, common in the big four banks, telcos, and specialist advisory firms.
• IT security officer or administrator, managing access, patching and security policy inside hospitals, universities, retailers and utilities.
• Governance, risk and compliance analyst, mapping security practice to frameworks and regulation, a growing area as Australian privacy and critical infrastructure rules tighten.

Australian employers in this field include the major banks, telecommunications companies, government departments and agencies, defence contractors, healthcare providers and the professional services firms that advise them. The sector has a well-documented skills shortage, which is why security roles appear on skilled occupation lists.