Cyber Risk & GRC Specialist — Operations, Audits & Compliance

David Jones Ltd.; City of Melbourne; On-site; AUD 110,000 - 150,000; Full time

Job summary

David Jones is seeking a Cyber Security & GRC Analyst to blend hands-on security operations with governance, risk and compliance expertise. You will monitor security events, coordinate remediation and help embed secure behaviours across the organisation.

Working with Technology and the business, you will translate complex security information into practical actions, support audits, and contribute to a robust cyber control environment that enables safe innovation.

Qualifications

• 3+ years of experience in cyber security operations or GRC
• Experience with security frameworks such as Essential Eight, NIST CSF, ISO 27001/27002 and PCI DSS
• Experience with vulnerability management, incident response and remediation tracking
• Strong written communication and ability to translate security findings for business stakeholders
• Proactive, collaborative mindset and stakeholder engagement skills

Responsibilities

• Monitor and triage security alerts, events and incidents with escalation as needed
• Coordinate vulnerability scanning and remediation prioritisation with system owners
• Support identity and access management activities including access reviews
• Maintain cyber security policies, standards and control framework
• Coordinate evidence and responses for internal and external audits
• Provide practical security guidance to Technology teams and stakeholders
• Assist with security awareness campaigns, training and phishing simulations

Skills

Cyber security operations

GRC / risk management

Incident response

Vulnerability management

Access management

Policy development

Security awareness training

Audit coordination

Stakeholder engagement

Security reporting

Education

Relevant cyber security/IT risk qualification

Industry certifications encouraged

Tools

Microsoft security solutions

Proofpoint

CrowdStrike

Cortex

Rapid7

Tenable

Job description

David Jones is seeking a Cyber Security & GRC Analyst to blend hands-on security operations with governance, risk and compliance expertise. You will monitor security events, coordinate remediation and help embed secure behaviours across the organisation.

Working with Technology and the business, you will translate complex security information into practical actions, support audits, and contribute to a robust cyber control environment that enables safe innovation.