Cyber Security Analyst

Blackroc; City of Brisbane; On-site; AUD 110,000 - 160,000; Full time

Job summary

Blackroc in Brisbane is seeking a Cyber Security Analyst specializing in GRC and assurance to support a broad uplift program.

You'll work with business and technology teams to assess controls, drive remediation and strengthen governance, risk and compliance frameworks across the organisation.

The role involves coordinating audits, developing metrics and reporting to executives, and guiding security improvements in a regulated environment.

Qualifications

• Experience in cyber security GRC, assurance and uplift in regulated environments.
• Knowledge of governance, risk, compliance and assurance processes.
• Ability to perform control assessments, maturity reviews and risk treatment planning.
• Experience coordinating audits and reporting to executives.

Responsibilities

• Supporting cyber security uplift activities across the organisation
• Undertaking cyber security reviews, control assessments and maturity assessments
• Assessing compliance against relevant security policies, standards and frameworks
• Supporting internal and external cyber security audits and assurance activities
• Coordinating vulnerability remediation with technical teams and service providers
• Tracking security risks, issues, actions and treatment plans
• Maintaining and assessing cyber security controls
• Developing practical cyber security metrics, dashboards and reporting
• Analysing security data to identify risks, trends and improvement opportunities
• Preparing clear executive and governance reporting
• Providing practical cyber security advice to business and technology stakeholders
• Facilitating workshops, interviews and security discussions

Skills

Cyber security GRC

Assurance uplift

Governance, risk & compliance

Security reporting & metrics

Stakeholder engagement

Tools

ISO/IEC 27001:2022

NIST CSF 2.0

Job description

Cyber Security Analyst – GRC & Assurance
Brisbane | Contract to June 2027with possibility of extension

We’re currently partnering with a well-established organisation looking for an experienced Cyber Security Analyst to support a broad cyber security uplift program.

This is a great opportunity for someone with a strong background across governance, risk, compliance and assurance who enjoys working across both business and technical teams to improve security controls, support assessments and drive remediation activities.

The focus is on helping the organisation strengthen its cyber security posture through practical governance, assurance, risk and control activities.

The role
You’ll work closely with business stakeholders, technology teams, service providers and senior leaders to support cyber security uplift initiatives, assess control effectiveness and help drive remediation and continuous improvement.

Key responsibilities will include:

• Supporting cyber security uplift activities across the organisation
• Undertaking cyber security reviews, control assessments and maturity assessments
• Assessing compliance against relevant security policies, standards and frameworks
• Supporting internal and external cyber security audits and assurance activities
• Coordinating vulnerability remediation with technical teams and service providers
• Tracking security risks, issues, actions and treatment plans
• Maintaining and assessing cyber security controls
• Developing practical cyber security metrics, dashboards and reporting
• Analysing security data to identify risks, trends and improvement opportunities
• Preparing clear executive and governance reporting
• Providing practical cyber security advice to business and technology stakeholders
• Facilitating workshops, interviews and security discussions

About you

We’re looking for someone with demonstrated experience across cyber security GRC, assurance and uplift, ideally within government or another regulated environment.

You’ll bring experience in areas such as:

• Cyber security governance, risk, compliance and assurance
• Security assessments and maturity reviews
• Cyber security control frameworks and maturity models
• Vulnerability management and remediation coordination
• Cyber risk assessments and treatment planning
• Security control testing and effectiveness assessments
• Cyber security reporting, dashboards and metrics
• Working with technical teams, service providers and senior stakeholders

Knowledge of the following will be highly regarded:

• ISO/IEC 27001:2022
• NIST Cyber Security Framework 2.0
• Queensland Government IS18
• Security assurance and assessment methodologies
• Microsoft security technologies and services