Cyber Controls Analyst

Anglicare; Sydney; On-site; AUD 120,000 - 150,000; Full time

Benefits offered by this job

Flexible work options

Salary packaging benefits

Professional development & careerPath

Staff discounts with retailers

Employee Assistance Program

Fitness Passport

Job summary

Anglicare is seeking a Cyber Risk and Controls Analyst in Sydney for a 6-month fixed-term role. You will support governance, risk management and security controls across the organisation, collaborating with Cyber Security, IT Architecture and business teams to strengthen resilience.

You will perform risk assessments, monitor framework compliance and prepare reports to drive continuous improvement in cyber resilience. Strong communication and stakeholder engagement are essential for success.

Qualifications

• 3+ years’ experience in cyber security, governance, risk management or compliance-related roles.
• Experience assessing and validating cyber security controls and supporting controls assurance activities.
• Knowledge of cyber security frameworks and standards including SCF, NIST CSF, NIST SP 800-53 and CIS Controls.
• Tertiary qualification in IT, Cyber Security, Risk Management or related field; CRISC/CISM/ISO27001 desirable.
• Excellent written and verbal communication with ability to engage technical and non-technical stakeholders.

Responsibilities

• Support governance frameworks, risk assessments and remediation activities.
• Prepare reports, documentation and support governance processes.
• Collaborate with Cyber Security, IT Architecture and business stakeholders to strengthen controls.
• Monitor control performance and assist with remediation tracking.

Skills

Risk assessments

Controls assurance

Governance & compliance

Cyber security frameworks

Stakeholder engagement

Documentation & reporting

Continuous monitoring

Education

Tertiary qualification in IT/Cyber Security/Risk Management

CRISC

CISM

ISO 27001 certification

Tools

SCF

NIST CSF

NIST SP 800-53

CIS Controls

Job description

Transform lives, every single day

Do you want a career that means more? At Anglicare Sydney, we bring the strength, the support and the strategy to make it happen.

For over 170 years, Anglicare has supported people and communities across Sydney and the surrounds. Our Seniors Communities portfolio spans Retirement Living and Support at Home services, supporting thousands of older Australians and their families.

We’re looking for a Cyber Risk and Controls Analyst to join our Cyber Security and IT Risk team. This role focuses on performing risk assessments in accordance with the team’s practises and guidelines as well as implementing and assessing cyber security controls, in alignment to the Cyber uplift program, supporting governance and compliance initiatives, and helping strengthen Anglicare’s cyber security posture. Working closely with business and technology stakeholders, you will contribute to controls assurance activities, risk assessments and continuous monitoring programs that help protect Anglicare’s critical systems, data and digital assets.

As part of a purpose-driven organisation, you’ll be working in a collaborative and values-led environment where your work directly contributes to enriching lives and strengthening communities.

This is a 6- month fixed term opportunity.

Your opportunity

The Cyber Risk and Controls Analyst plays an important role in supporting Anglicare’s cyber security governance, risk management, and to a lesser degree, controls implementation and assurance activities. You will determine security effectiveness through risk assessments, as well as implementing and assessing cyber security controls, in alignment to the Cyber uplift program, monitor compliance with security frameworks and standards, and provide insights that help strengthen cyber resilience across the organisation.

Working alongside Cyber Security, IT Architecture and business stakeholders, you will support control validation, governance frameworks, risk assessments and remediation initiatives while helping ensure Anglicare maintains a secure and resilient technology environment.

With ownership, you will:

You will support the development and maintenance of governance and compliance frameworks, conduct risk assessments and gap analyses, monitor control performance and remediation activities, and contribute to security assurance initiatives. You will also prepare reports and documentation, support governance processes and work closely with stakeholders to strengthen cyber security controls and reduce organisational risk.

What you’ll bring

You are a cyber security professional with experience in risk assessments, controls assurance, compliance and governance. You have a good understanding of cyber security control frameworks, in particular the SCF framework, compliance requirements and security best practices, and enjoy analysing complex environments to identify control gaps and opportunities for improvement.

You combine strong analytical and problem-solving skills with excellent communication and stakeholder engagement capabilities. You are detail-oriented, collaborative and proactive, with the ability to translate technical findings into practical recommendations that support business and security objectives. You are also committed to continuous learning and staying informed about emerging threats, technologies and regulatory developments.

You will also need:

• Tertiary qualification in Information Technology, Cyber Security, Risk Management or a related field. Certifications such as CRISC, CISM or ISO 27001 are highly desirable.
• 3+ years’ experience in cyber security, governance, risk management or compliance-related roles.
• Experience assessing and validating cyber security controls and supporting controls assurance activities.
• Knowledge of cyber security frameworks and standards including SCF, NIST Cybersecurity Framework, NIST SP 800-53 and CIS Controls.
• Experience with control testing, evidence review, gap analysis and remediation tracking.
• Understanding of continuous control monitoring, compliance reporting and security assurance practices.
• Strong analytical, problem-solving and risk assessment capabilities.
• Excellent written and verbal communication skills with the ability to engage technical and non-technical stakeholders.
• Strong documentation and reporting skills with exceptional attention to detail.
• Proven ability to collaborate effectively across teams and contribute to organisation-wide cyber security and governance initiatives.

Why Anglicare?

At Anglicare, we provide meaningful opportunities and choice – both for the communities we support and the people who work with us.

Here’s what you’ll enjoy:

• Flexible work options to balance life and career.
• Salary packaging benefits – up to $15,900 of your income tax free, plus $2,650 for meals and entertainment.
• Ongoing professional development and career pathways.
• Exclusive staff discounts with over 400 retailers.
• Employee Assistance Program and Fitness Passport with access to 800+ gyms.
• Belonging to a supportive, purpose-driven team committed to making a difference.

We strongly encourage applications from Aboriginal and Torres Strait Islander peoples, and people of all ages, genders, abilities and cultural backgrounds.

Application Close Date: October 04, 2026