Master of information Technology (Cyber Security)

The Master of Information Technology (Cyber Security) at Melbourne Institute of Higher Education is a two-year coursework master's degree built for people who want to work on the defensive side of IT, protecting networks, systems and data from attack. You will study the technical core of IT alongside specialist cyber security units: network security, cryptography, secure software practices, digital forensics, incident response, risk and governance. The exact unit list is set by the institute, so check the official course page or the CRICOS register entry (course code 116987K) for the current structure.

How the degree is structured

Australian master's degrees by coursework usually run over two years full time, split into semesters or trimesters. Each unit of study carries a set number of credit points, and you need a set total to graduate, typically 96 to 192 credit points depending on whether you enter with a related bachelor's degree or a different background. Most students take four units per semester. Many master's programmes finish with a capstone project or a minor research thesis in your final semester, where you apply what you have learned to a real security problem. Some also include a professional placement or industry-based project unit. Confirm the credit point total, the capstone or thesis requirement, and whether placement is offered by checking the official page before you apply.

What you actually learn

You will learn to configure and audit firewalls and intrusion detection systems, analyse network traffic for signs of compromise, write and review code with security in mind, conduct a forensic investigation after a breach, and map an organisation's security posture against frameworks like the Essential Eight and ISO 27001. You will also cover the legal and ethical side, Australian privacy law, the Security of Critical Infrastructure Act, and how to report an incident to the ACSC. Group work and lab exercises are common, so you graduate able to explain a risk to a manager as well as fix a vulnerability.

Who it suits

This degree suits three groups: IT graduates who want to specialise in security, career changers with a technical background who need formal qualifications, and international students looking for a pathway into the Australian tech workforce. If you already hold a bachelor's degree in computing, you may be able to enter with credit for prior study and finish faster, ask the institute about recognition of prior learning. International applicants need to meet English requirements. IELTS Academic 6.0–6.5 overall is the common standard for coursework postgraduate courses, with TOEFL iBT, PTE Academic, Cambridge C1 Advanced and the institute's own English programmes accepted as equivalents. The Department of Home Affairs sets a separate English threshold for the Student visa itself. While studying on a Student visa you can work up to 48 hours per fortnight, and after graduating you may be eligible for the Temporary Graduate visa (subclass 485) post-study work stream, which lets you stay and work in Australia. Tuition is published on the CRICOS register, check there and on the official course page for the current figures and intake dates.

• Cyber security analyst, monitor networks, investigate alerts and respond to incidents for banks, insurers, telcos, government agencies and managed security service providers.
• Security engineer, build and maintain firewalls, endpoint protection and identity systems across Australian organisations in finance, health, retail and mining.
• Penetration tester, test systems and applications for weaknesses, working for specialist consultancies or in-house security teams.
• Digital forensics analyst, recover and analyse evidence after a breach, often for law enforcement, eDiscovery firms or incident response consultancies.
• IT security consultant, advise clients on risk, compliance and security architecture, frequently at the big four banks, consultancies and government departments.
• Security operations centre (SOC) analyst, work shifts in a SOC for a bank, telco or MSSP, triaging threats in real time.
• Governance, risk and compliance (GRC) analyst, map security controls to frameworks like ISO 27001 and the Essential Eight, and help organisations meet Australian privacy and critical infrastructure obligations.
• Network administrator or systems administrator, with security specialisation, managing the infrastructure that keeps an organisation running.

Australian employers in these roles include the major banks, telecommunications companies, government agencies such as the Australian Cyber Security Centre and state police, defence contractors, hospitals, universities and a growing number of specialist security firms. The field has a well-publicised skills shortage in Australia, and graduates with a master's and relevant certifications are in demand.