Cyber GRC Analyst: Risk & Compliance Leader

WorkCover Queensland; Brisbane; Hybride; AUD 110 000 - 140 000; Plein temps

Avantages offerts par ce poste

Hybrid work arrangements

Learning and development opportunities

Health and wellbeing program

Study assistance

Résumé du poste

WorkCover Queensland is seeking a Cyber Security GRC Analyst to strengthen governance, risk and compliance and support cyber resilience across the organisation. You'll conduct risk assessments, validate controls and collaborate with stakeholders to identify and remediate gaps.

You’ll contribute to policy improvements, audits and regulatory conformity while staying abreast of evolving standards and industry developments. Hybrid work and development opportunities are available.

Qualifications

• Experience in cyber security, technology risk, governance or a related discipline within a complex or regulated environment.
• Experience conducting cyber risk assessments and reporting on the effectiveness of cyber security controls.
• Working knowledge of NIST Cybersecurity Framework, ISO 27001, Essential Eight and IS18, or comparable standards.
• Experience supporting audits, compliance activities, control assurance and remediation of cyber risks and control gaps.
• The ability to interpret regulatory, policy and framework requirements and translate them into practical cyber security controls and governance processes.
• Experience maintaining accurate and auditable cyber risk, control and compliance records within a GRC platform.
• Sound knowledge of cyber security technologies, Microsoft security products and cloud environments such as Azure and AWS.
• Strong analytical, communication and stakeholder engagement skills, with the ability to manage competing priorities and contribute to cross-functional outcomes.
• A tertiary qualification in cyber security, information technology or a related discipline, or equivalent relevant professional experience.

Responsabilités

• Conduct cyber risk assessments, control assurance and compliance activities in line with WorkCover’s Information Security Management System, regulatory obligations and approved cyber security frameworks.
• Assess the design and operating effectiveness of cyber security controls, documenting findings, evidence, risk implications and recommended improvements.
• Support internal audits and external certification activities by coordinating evidence, validating controls and maintaining accurate and traceable assurance records.
• Partner with technical and business stakeholders to identify cyber risks, control gaps and compliance issues and support sustainable remediation.
• Analyse cyber risk, control and compliance information to develop meaningful reporting and insights that support risk-based decisions.
• Provide practical cyber governance and risk advice and contribute to improvements across policies, standards, frameworks and processes.
• Monitor emerging cyber risks, regulatory requirements and industry developments, and contribute to initiatives that strengthen cyber awareness and risk ownership.

Connaissances

Cybersecurity

GRC

Risk assessment

Stakeholder engagement

Regulatory compliance

ISO 27001

NIST CSF

Cloud security

Audit support

GRC platform

Formation

Tertiary qualification in cyber security or related discipline

Outils

Azure

AWS

GRC platform

Description du poste

WorkCover Queensland is seeking a Cyber Security GRC Analyst to strengthen governance, risk and compliance and support cyber resilience across the organisation. You'll conduct risk assessments, validate controls and collaborate with stakeholders to identify and remediate gaps.

You’ll contribute to policy improvements, audits and regulatory conformity while staying abreast of evolving standards and industry developments. Hybrid work and development opportunities are available.