Cyber Risk Analyst

Kirra Services; Canberra; On-site; AUD 120,000 - 170,000; Full time

Benefits offered by this job

Supply Nation Certified

Job summary

Kirra Services in Canberra is seeking a security risk professional to identify, test and assess controls in line with PSPF, ISM and agency policies. You will document risk assessments and recommend treatments to reduce risk exposure across technologies and services.

You will collaborate with system owners and technical leads, facilitate risk remediation discussions, and help develop security policies and procedures while improving cyber security services overall.

Responsibilities

• Identify, test and assess security controls per PSPF/ISM and agency guidelines
• Assess risk impact against enterprise risk tolerance
• Collaborate to ensure enterprise level risk assessment and identify remediation
• Analyze and document security risk; recommend treatments and changes
• Undertake security risk assessments on key technology components and remediation areas
• Work with team to analyse cyber risks within risk controls environment
• Categorise and prioritise cyber risks and remediation actions
• Document risk assessments using Service Australia templates
• Facilitate discussions with system owners and technical leads on risks and remediations
• Manage relationships with stakeholders to achieve goals
• Assist with development and implementation of security policies, procedures, projects
• Continuously improve efficiency and effectiveness of cyber security service
• Share knowledge to build team capability
• Educate and inform staff to promote policy adherence
• Kirra Services is Supply Nation certified ICT provider offering consulting, recruitment and project management services

Job description

Key duties may include, but are not limited to:

1. Identify, test, and assess applicable security controls in line with the Australian Government PSPF, ISM and agency policies and guidelines.
2. Assess the impact of risk against Enterprise Risk tolerance.
3. Collaborate widely to ensure risk is assessed at an enterprise level and all plausible remediation activities are identified.
4. Analyse and document security risk and recommend treatments and modifications to security practices and procedures using expertise and technical knowledge.
5. Undertake security risk assessments on key technology components and identify areas for remediation and appropriate remediation controls.
6. Work with the existing team members to analyse the cyber risks identified within the broader risk and controls environment to inform an assessment of the risk exposure.
7. Undertake the categorisation and prioritisation of cyber risks (and associated remediation actions) identified.
8. Document risk assessments within Service Australia templates.
9. Facilitate discussions with system owners and technical leads around the risks identified and the appropriate remediations.
10. Manage, develop, and support complex relationships with stakeholders to achieve work area goals.
11. Assist with the development and implementation of security policies, procedures, projects, and strategies.
12. Continuously work to improve the efficiency and effectiveness of the cyber security service.
13. Share knowledge and skills to identify and develop capability within the team.
14. Educate and inform departmental staff to promote understanding and ensure adherence to security policy and processes.

Kirra Services is a Supply Nation Certified ICT Service Provider. Specialising in Hardware and Software procurement for Government, Corporate, SME and Not-for-Profit Sectors. Services include consulting, recruitment and project management.