Cyber Security Analyst

EGM Recruitment; Adelaide; On-site; AUD 90,000 - 130,000; Full time

Job summary

Credit Union SA is seeking a Cyber Security Analyst to join our IT and Security team on a fixed‑term two‑year contract. You will lead security awareness, conduct risk assessments, and help protect member trust in a regulated financial services environment.

You will work under a Senior Cyber Analyst and gain hands‑on exposure to governance, resilience and threat intelligence. Strong communication and analytical skills are essential.

Qualifications

• Experience in security awareness programs, phishing simulations or staff communications.
• Strong understanding of cyber threats, attack vectors and common vulnerabilities.
• Experience contributing to cyber security risk assessments and control assurance.
• Knowledge of NIST CSF and the Essential 8.
• Working knowledge of Microsoft security ecosystem and ability to configure controls.

Responsibilities

• Lead security awareness programs including phishing simulations and staff training.
• Perform control testing to meet CPS 234 obligations with support.
• Coordinate supplier security reviews and third‑party risk assessments.
• Manage security policies, standards and procedures; maintain CMDB data.
• Monitor, investigate and respond to security events and resilience exercises.
• Support vulnerability management and remediation tracking.

Skills

Security awareness

Phishing simulations

Threat intelligence

Compliance awareness

Stakeholder management

Communication skills

Analytical mindset

Regulatory knowledge

Tools

Microsoft Defender

Microsoft Purview

Entra ID

Job description

OUR CLIENT Credit Union SA is a member-based bank that's spent more than 60 years putting people and community first. They offer South Australians a smarter and more human centric approach to banking. Their people are central to that success as Credit Union SA invests in a workplace where diverse thinking is welcomed and employees are genuinely supported to do their best work. They are seeking a Cyber Security Analyst, on an initial 2 year fixed-term contract, to join their IT and Security team and help protect member trust.

About The Role

The Cyber Security Analyst is responsible for protecting member trust through cyber security operations, governance, awareness and resilience activities. Working alongside a Senior Cyber Analyst, you will gain broad, hands-on experience in a regulated financial services environment, with a clear path to grow into more senior responsibilities.

Key Responsibilities Include

• Lead the people-first security awareness program, including phishing simulations, staff inductions, communications, campaigns and recognition initiatives that strengthen security behaviours.
• Conduct control testing to meet CPS 234 obligations, with support from the Senior Cyber Analyst.
• Run annual supplier security reviews and third-party risk assessments aligned to APRA CPS 234.
• Coordinate risk assessments and security reporting while maintaining security policies, standards and procedures.
• Research emerging threats, vulnerabilities and industry trends so you can turn them into insights and recommendations for the team and wider business.
• Support the monitoring, investigation and response to security events, resilience exercises and post-incident reviews.
• Assist in delivering and improving the vulnerability management program, including remediation tracking and reporting.
• Support the implementation, configuration and optimisation of security controls.
• Maintain accurate security records, registers and CMDB data.
• Build relationships with industry peers, vendors and cross-sector forums to share information and keep learning.

ABOUT YOU

To Be Successful In This Role, You Will Demonstrate

• Experience developing, supporting or contributing to security awareness, training, communications or phishing simulation activities.
• Strong understanding of cyber threats, attack vectors and common security vulnerabilities.
• Experience contributing to cyber security risk assessments and control assurance, with the ability to analyse and communicate outcomes.
• Knowledge of NIST CSF and the Essential 8.
• Working knowledge of the Microsoft security ecosystem (Defender, Purview, Entra ID), with a willingness to learn, configure and optimise security controls.
• Excellent communication and presentation skills, with the ability to explain complex concepts to non-technical audiences.
• An analytical mindset and attention to detail, with the ability to spot patterns in security data.
• Strong stakeholder management skills and the ability to work independently with a high degree of self-motivation.
• Familiarity with APRA CPS 234, knowledge of ITIL foundations and experience in financial services or another regulated industry is useful but not necessary.