Cyber GRC Analyst

Paxus; City of Brisbane; On-site; AUD 110,000 - 150,000; Full time

Job summary

Paxus is seeking an experienced Cyber Security Analyst to support a major uplift program within a Queensland Government environment. The role focuses on governance, risk, compliance and assurance, with hands-on work across assessments, maturity, remediation, risk registers and reporting.

You will collaborate with business stakeholders, ICT providers and technical teams to strengthen controls, improve cyber maturity and reduce risk. Strong communication and stakeholder engagement are essential.

Qualifications

• Experience delivering cyber security uplift activities.
• Strong governance, risk, compliance and assurance experience.
• Experience coordinating vulnerability remediation.
• Experience conducting security assessments and maturity reviews.
• Proven reporting and analytics skills with cyber dashboards and metrics.

Responsibilities

• Support cyber security uplift initiatives and control improvements.
• Maintain cyber security control libraries and assess control maturity.
• Conduct security assessments, maturity reviews and compliance reviews.
• Support internal and external cyber security audits and assurance activities.
• Coordinate vulnerability remediation with technical teams and service providers.
• Support cyber security risk assessments, treatment plans and risk registers.
• Develop cyber security metrics, dashboards and executive reporting.
• Analyse security data to identify risks, trends and priorities.
• Provide practical cyber security advice to stakeholders.
• Facilitate security workshops and stakeholder discussions.

Skills

GRC

Risk management

Security assurance

Vulnerability remediation

Security governance

Security metrics

Executive reporting

Tools

Microsoft security technologies

Job description

We are seeking an experienced Cyber Security Analyst to support a major cyber security uplift program within a Queensland Government environment.

This role focuses on cyber security governance, risk, compliance and assurance, with a strong hands-on component across security assessments, control maturity, vulnerability remediation, risk management and cyber security reporting.

You'll work closely with business stakeholders, ICT service providers, technical teams and senior management to strengthen security controls, improve cyber maturity and reduce cyber risk.

Key Responsibilities

• Support delivery of cyber security uplift initiatives and control improvements.
• Maintain cyber security control libraries and assess control maturity and effectiveness.
• Conduct security assessments, maturity reviews and compliance reviews.
• Support internal and external cyber security audits and assurance activities.
• Coordinate vulnerability remediation with technical teams and service providers.
• Support cyber security risk assessments, treatment plans and risk registers.
• Develop cyber security metrics, dashboards and executive reporting.
• Analyse security data to identify risks, trends and improvement priorities.
• Provide practical cyber security advice to business and project stakeholders.
• Facilitate security workshops, interviews and stakeholder discussions.

About You

You will have:

• Demonstrated experience delivering cyber security uplift activities.
• Strong experience across GRC, risk, compliance and security assurance.
• Experience coordinating vulnerability remediation.
• Experience conducting security assessments and maturity reviews.
• Strong reporting and analytical skills, including cyber security dashboards and metrics.
• Experience working in government, critical infrastructure or another regulated environment.
• Excellent stakeholder engagement and communication skills.

To be considered for this role, the following skills and experince is required:

• ISO/IEC 27001:2022
• NIST Cybersecurity Framework 2.0
• Queensland Government IS18
• Cyber security control frameworks and maturity models
• Vulnerability management
• Security assessment and assurance methodologies
• Cyber security risk management
• Microsoft security technologies and services
• Cyber security metrics and reporting

Paxus values diversity and welcomes applications from Indigenous Australians, people from diverse cultural and linguistic backgrounds, and people living with a disability. The recruitment and selection process varies, and some roles may include completion of pre-employment assessments, in-person or online interviews, psychometric testing, written assessments, scenario-based tasks, presentations, and pre-employment checks such as medical (including drug and alcohol), criminal history, or financial. If you require an adjustment to any part of the recruitment process, including the application form or assessments completed in an alternate format, please contact me using the above details. As part of our ongoing commitment to accessibility, we are also in the process of updating our website to reach full conformance with WCAG 2.2 AA. If you experience any difficulties, please contact me on the above details.