Cyber Governance & Security Analytics — Hybrid Sydney

ASX Limited; Sydney; Hybrid; AUD 110,000 - 150,000; Full time

Benefits offered by this job

Hybrid working

Job summary

ASX Limited is seeking a Security Analyst to join our hybrid Sydney team. You will support vulnerability management, uplift cyber controls, and build governance dashboards to demonstrate compliance across key domains.

You will translate complex security data into clear insights for IT owners, senior management, and risk committees, while coordinating evidence packs for assurance and audits.

Qualifications

• 5–8 years of experience in cyber or technology governance, risk, compliance or assurance roles.
• Experience with data-driven reporting and metrics.
• Working knowledge of cyber control domains: IAM, detection/monitoring, patching, vulnerability management.
• Familiarity with frameworks: NIST CSF, ISO 27001, ASD Essential Eight, CPS 234, COBIT, MITRE ATT&CK.
• Ability to visualise data using Power BI/Tableau/Excel and communicate insights to varied audiences.

Responsibilities

• Support vulnerability management analysis and reporting.
• Uplift and document cyber security controls per best-practice frameworks.
• Develop and maintain cyber governance dashboards and metrics.
• Consolidate data from scanners, CMDB and identity systems to identify gaps.
• Translate technical data into clear visual insights for senior management and risk committees.
• Prepare assurance artefacts and reporting packs for audits and regulators.
• Assist automated reporting and integration into risk systems like ServiceNow.
• Maintain governance artefacts with version control and traceability.
• Identify opportunities to automate cyber reporting and data flows.
• Collaborate with SOC and other security teams as needed.

Skills

Governance reporting

Data visualization

Stakeholder engagement

Risk assessment

Cyber security

Tools

Power BI

Tableau

Excel

GitLab

ServiceNow

Elastic

Job description

ASX Limited is seeking a Security Analyst to join our hybrid Sydney team. You will support vulnerability management, uplift cyber controls, and build governance dashboards to demonstrate compliance across key domains.

You will translate complex security data into clear insights for IT owners, senior management, and risk committees, while coordinating evidence packs for assurance and audits.