Brisbane Hybrid InfoSec Analyst - GRC & Vulnerabilities

M&T Resources; Brisbane; Hybrid; AUD 90,000 - 120,000; Full time

Job summary

M&T Resources in Brisbane CBD is seeking a Mid-Level Information Security Analyst to join a growing Threat Management team within the Information Security function. The role focuses on governance, risk, assurance and vulnerability management, working with business and technology stakeholders to strengthen the organisation’s security posture.

You’ll coordinate security assessments, manage remediation activities, support third-party security reviews and drive security best practices across the

Qualifications

• 3–6 years’ experience in Information Security, Cyber Security, GRC, Security Assurance, or Technology Risk.
• Strong understanding of security governance, risk, and compliance principles.
• Experience with vulnerability management and remediation activities.
• Knowledge of ISO 27001 and NIST frameworks.
• Strong stakeholder engagement and communication skills.
• Ability to manage competing priorities and deliver outcomes.

Responsibilities

• Manage vulnerabilities and remediation activities.
• Coordinate security testing and assurance reviews.
• Conduct third-party security assessments.
• Support security governance, risk, and compliance initiatives.
• Track and report on security risks and remediation progress.
• Partner with business and technology stakeholders to improve security controls and processes.

Skills

Information Security

GRC

Vulnerability Mgmt

ISO 27001

NIST

Stakeholder Eng

Delivery Focus

Financial Sector

Job description

M&T Resources in Brisbane CBD is seeking a Mid-Level Information Security Analyst to join a growing Threat Management team within the Information Security function. The role focuses on governance, risk, assurance and vulnerability management, working with business and technology stakeholders to strengthen the organisation’s security posture.

You’ll coordinate security assessments, manage remediation activities, support third-party security reviews and drive security best practices across the