Cyber & Digital Risk Specialist (IT & OT Security)

Urban Utilities; Brisbane; On-site; AUD 120,000 - 150,000; Full time

Benefits offered by this job

Flexibility (9-day fortnights)

26 weeks parental leave

Salary packaging options

Corporate discounts

WORK180 endorsement

Job summary

Urban Utilities seeks a Specialist Analyst Cyber and Digital Risk to join its Cyber Security & Digital Risk team in Brisbane. You will provide expertise in identifying, assessing, and mitigating cyber and digital risks across IT and OT, defining controls, and guiding risk-based decisions.

The role involves projects, vendor assessments, vulnerability management, and compliance activities, with on-call responsibilities and collaboration across business units. Aims to strengthen resilience.

Qualifications

• 2+ years in governance, risk, and compliance roles.
• OT environments knowledge and technology stacks understanding.
• Experience with risk assessments and stakeholder engagement.
• Experience in Australian Critical Infrastructure, Utilities, and regulatory frameworks.
• Strong analytical, problem-solving and adaptable mindset.
• Ability to communicate security responsibilities to technical teams.
• Familiarity with industry standards (e.g., ISO27001, NIST-CSF).
• Excellent communication and leadership to influence across the organisation.

Responsibilities

• Oversee cyber security and digital control standards across IT and OT.
• Conduct risk assessments and uplift security controls.
• Develop and test disaster recovery and continuity procedures.
• Provide advisory guidance on cybersecurity strategies to programs and projects.
• Lead security awareness programs and collaborate with business units.

Skills

Cybersecurity GRC Experience

OT Knowledge

Risk Assessment

Regulatory Expertise

Analytical Thinking

Security Advisory

Frameworks & Compliance

Communication & Leadership

Collaboration & Customer Focus

Adaptability & Decision-Making

Security Requirements

Certifications (Desirable)

Job description

Applications are no longer being accepted for this role. You can still review the details below or browse open jobs .

Urban Utilities

Specialist Analyst Cyber and Digital Risk

Hybrid - Fortitude Valley, Queensland, Australia

Sep 18, 2026

There’s No Us Without U. Care with Us, for Today and Tomorrow

There's no life without water, and at Urban Utilities, we live and breathe that knowledge every single day. Our passion drives us to leverage digital innovation and technology to revolutionise the water industry. Join us in shaping our digital future, making a lasting impact, and transforming our teams. And it's why we need people like YOU. Come and shape our future with us and make a real and lasting impact across our teams.

Your opportunity:

Our Cyber Security and Digital Performance team are seeking a Specialist Analyst Cyber and Digital Risk to join their team. If you have a passion for cyber security, digital risk assessment, and risk-based decision-making we encourage you to apply.

As a Specialist Analyst within our Cyber Security & Digital Risk team, you will provide expertise and consultancy to internal clients across Urban Utilities in the identification, assessment and mitigation of cyber security and digital risks. In this role you will be responsible for cyber security subject expertise, risk expertise, and defining cyber security and digital controls in both the information technology and operational technology domains.

The role will be involved in projects, vendor assessments, vulnerability assessments, risk management, technology resilience and compliance activities.

Key Responsibilities:

• Cyber Security and Digital Control Standards : Oversee all cyber security and digital controls across IT and OT environments, and assist in the management of controls across the organisations technology stack.
• Risk & Vulnerability Management : Conduct risk assessments, advise on gaps and manage uplift to security controls, identify and act on vulnerabilities, and ensure cybersecurity assurance and accreditation.
• Disaster Recovery & Continuity Planning : Develop, maintain, and test disaster recovery and business continuity procedures, and assist in running cyber security testing exercises.
• Advisory & Consultancy : Provide guidance on cybersecurity strategies, design, and maintenance to operational programs and projects within the branch and across the organisation.
• Awareness & Collaboration : Facilitate security awareness programs and work with business units to implement best practices.

About you:

• Cybersecurity GRC Experience : 2+ years in governance, risk, and compliance roles.
• Operational Technology (OT) Knowledge: Expertise in OT environments and understanding of technology stacks.
• Risk Assessment & Stakeholder Engagement : Confident in conducting risk assessments and educating stakeholders.
• Regulatory & Industry Expertise : Experience in Critical Infrastructure, Utilities, and regulatory frameworks in Australia.
• Analytical & Problem-Solving Skills : Strong critical thinking, problem-solving, and adaptability.
• Technical & Security Advisory : Ability to communicate security responsibilities and advise technical teams.
• Cybersecurity Frameworks & Compliance : Familiarity with industry standards and best practices (e.g. E8, ISO 27001, NIST-CSF, AESCSF etc.).
• Communication & Leadership : Ability to articulate security and risk matters at all levels of the organisation.
• Collaboration & Customer Focus : Works well in cross-functional teams with a strategic, customer-centric mindset.
• Adaptability & Decision-Making : Agile, proactive, and able to prioritise effectively in a dynamic environment.
• Security Requirements : Security clearance/SOCI requirements may apply, depending on the role and responsibilities.
• Desirable Certifications : CISSP, CISM, CompTIA Security+, SSCP, or experience with security audits and implementation.

Performance of ‘on call’ duties are an inherent requirement of this role. This requires that the employee must be available to be on-call and to attend to work matters, both in person and remotely, outside of normal working hours, including evenings, weekends and public holidays, as reasonably required to fulfill the requirements of the position. The days, times, duration and frequency of on call arrangements may be subject to change, including at short notice, as required by Urban Utilities’ operational needs as applying from time to time. At all times whilst on-call, you must be fit for duty, contactable, and able to respond, including the ability to physically attend if required, to the operational needs of the business within a reasonable timeframe and in a safe manner.

At UU, we celebrate diversity. We genuinely believe that bringing together diversity of thoughts, perspectives and expressions is key and crucial to our success as a business. You might find you meet some, but not all, of the job requirements for this role. We’d still encourage you to apply as we we’re looking for the right human being for this role - it’s about so much more than ticking all the boxes!

Why Urban Utilities?

At Urban Utilities, the work we do is about so much more than the bottom line. We're a leading provider of world-class drinking water and wastewater services to the vibrant communities of Brisbane, Ipswich, Lockyer Valley, Somerset, and Scenic Rim. As we continue to grow, we're committed to planning ahead and shaping a sustainable future around water for generations to come.

At the core of our work lies genuine care: for our team, our customers, communities, and the environment. From the flush of a toilet to major infrastructure projects and residential developments, we're dedicated to being there every step of the way.

Our HQ is in Fortitude Valley, Brisbane, but you'll find us all over SEQ - working in cool places like the SAS Laboratory in Darra, field-based depots in Eagle Farm, Acacia Ridge, Bundamba, and wastewater treatment plants dotted across the region.

We know the chance to thrive, and progress comes hand in hand with the support to balance work with life. So, you’ll access an increasingly diverse range of benefits and initiatives that’ll help you bring the best you. Speaking of which, here’s just a sample of the benefits we offer our team:

• Flexibility at UU depends on the type of work you do but could include options such as, 9-day fortnights and flexible days. Talk to us about what flexibility means to you!
• 18 weeks of paid parental leave, 15 days personal leave including two proactive wellbeing days, and an additional day of leave each year to connect with friends and family
• Generous Salary Packaging options, including novated leases
• Corporate discounts across Health insurance, technology and more
• Urban Utilities is an endorsed employer for all women. See our range of benefits and policies directly at WORK180

Please click ‘Apply’ to complete your application. We are looking to progress to interviews as soon as possible, so we encourage you to apply at your earliest opportunity.

We ensure that 1.6 million South East Queenslanders have access to world-class drinking water and waste water services.

Urban Utilities delivers essential drinking water and wastewater services to Southeast Queensland communities while prioritizing customer care, environmental sustainability, and future planning.

Utilities

Company size 1,001–5,000 employees

Company type Government agency Founded 2010

Total funding 0

Team growth

Momentum

Team growth

0% in 12 mo

1,110 employees on LinkedIn

Sep 22 Mar 26

Employee experience

What it’s like inside

3.2

87 reviews

40% would recommend

Culture & values

Culture & values 3.0

Work-life balance

Work-life balance 3.7

Career opportunities

Career opportunities 2.8

Compensation & benefits 3.6

Capital

Funding history

Footprint

Where they work

Headquarters Fortitude Valley, Queensland

31 Duncan St, Fortitude Valley, Queensland 4006, AU