Cyber Security Analyst

IMB Bank; Wollongong City Council; On-site; AUD 90,000 - 120,000; Full time

Benefits offered by this job

Great training and onboarding

Career pathways and growth

Diversity and inclusion

Wellbeing days

Friendly team environment

Product concessions

Purchase leave options

Paid parental leave

Job summary

IMB Bank is seeking a Cyber Security Analyst to strengthen our cyber security capability across technology and business operations, working with technology teams, risk professionals and stakeholders. You will help implement security governance, manage APRA CPS 234 obligations, and monitor risk, incident response and third-party risk while building a strong security culture.

Ideal candidates have 2+ years in cyber security or related IT risk, cloud and network security knowledge, and solid

Qualifications

• 2+ years in infrastructure, engineering, cyber security, IT risk or a related technology discipline in a large or complex environment.
• Solid understanding of network, cloud, endpoint and identity concepts and how they are secured.
• Knowledge of security frameworks and standards such as ISO 27001, NIST, SOC 2, ASD Essential Eight and APRA CPS 234.
• Experience in risk assessments, compliance activities, control reviews and third-party risk.
• Strong communication to diverse audiences and stakeholder engagement skills.
• Experience in an APRA-regulated entity and hands-on with Microsoft technologies is advantageous.

Responsibilities

• Identify, assess and report cyber security risks across the organisation.
• Support the ongoing development and operation of IMB's security framework, policies and controls.
• Monitor security compliance, risk reporting and governance activities.
• Review technical designs, access controls, cloud environments and security configurations.
• Identify security requirements for new applications and products.
• Conduct security assessments, control testing, vendor reviews and third-party risk evaluations.
• Support investigation of security incidents and vulnerabilities with managed service partners.
• Partner with technology and business teams to embed security in projects and changes.
• Contribute to security awareness initiatives and build a strong security culture.
• Support continuous improvement of cyber security practices and reporting.

Skills

Security risk assessment

Security governance

Incident response

Stakeholder engagement

Cloud security

Threat monitoring

Tools

Azure

Microsoft technologies

MS Active Directory

Job description

At IMB, we're committed to protecting our members, people and information assets in an increasingly complex digital world. We're looking for a Cyber Security Analyst to help strengthen our cyber security capability, manage emerging risks, and ensure security remains embedded across our technology and business operations.

Working closely with technology teams, risk professionals, auditors, contract managers and business stakeholders, you'll support IMB's Cyber Security Strategy, security governance framework, and compliance obligations, including APRA CPS 234.

What you'll be doing

• Identify, assess and report on cyber security risks across the organisation
• Support the ongoing development and operation of IMB's security framework, policies and controls
• Monitor security compliance, risk reporting and governance activities
• Review technical designs, access controls, cloud environments and security configurations through a security lens
• Identify security requirements for new applications and products
• Conduct security assessments, control testing, vendor reviews and third-party risk evaluations, including contract reviews
• Support the investigation of security incidents and vulnerabilities, working with our managed security service partners
• Partner with technology and business teams to ensure security requirements are incorporated into projects and change initiatives
• Contribute to security awareness initiatives and help build a strong security culture across IMB
• Support continuous improvement of cyber security practices, controls and reporting.

About you

You are a collaborative and curious technology professional who enjoys solving problems, influencing outcomes and helping others understand and manage security risks. You may already work in cyber security, or you may be coming from an infrastructure, engineering or IT risk role and looking to build your career in security.

You'll bring:

• 2+ years' experience in infrastructure, engineering, cyber security, IT risk or a related technology discipline, ideally in a large or complex environment or a mature MSP
• A solid understanding of network, cloud, endpoint and identity concepts and how they are secured
• Knowledge of, or exposure to, security frameworks and standards such as ISO 27001, NIST, SOC 2, ASD Essential Eight and APRA CPS 234
• Experience with, or a strong interest in, risk assessments, compliance activities, control reviews and third-party risk
• The ability to communicate technical information clearly to a variety of audiences
• Well-developed analytical, problem-solving and stakeholder engagement skills.
• Experience in an APRA-regulated entity, hands-on experience with Microsoft technologies and relevant industry certifications will be highly regarded.

We know great candidates don't always tick every box. If this role excites you and you bring most of what we're looking for, we encourage you to apply.

About IMB

We are proud of our 145-year history helping members achieve their financial goals. As a member-owned bank, we are focused on delivering great experiences, trusted service, and innovative solutions that make banking easier. An award-winning and growing organisation, we have donated more than $13 million through our Community Foundation to over 1,100 projects in the communities in which we live.

IMB Benefits include:

• Great training and onboarding
• Genuine career pathways and opportunity to accelerate your skills and experience
• A supportive culture that actively promotes diversity and inclusion
• Designated wellbeing days
• Friendly and professional team environment
• Product concessions
• Purchase leave options
• Paid parental leave.

If you're passionate about cyber security and want to make a genuine impact in a collaborative and values-driven organisation, we'd love to hear from you.

Applications close 16th November 2026