Cyber Security Analyst (Cloud & IAM)

Southern Ports; Albany, Bunbury, Shire Of Esperance; On-site; AUD 149,000 - 156,000; Full time

Benefits offered by this job

Flexible Working Arrangements

Annual Health and Well-being Benefits

Salary packaging options

Job summary

Southern Ports is seeking a Fixed Term Full Time Cyber Security Analyst (Cloud & IAM) to drive cloud security, IAM governance and risk management from our Perth office. You will act as a subject matter expert, influence technology decisions and enhance security maturity across Microsoft cloud environments.

Key duties include leading governance, identity and access management controls and delivering secure-by-design initiatives aligned with regulatory obligations.

Qualifications

• Tertiary qualifications in Computer Science, Information Technology or Cyber Security.
• Microsoft role-specific certifications (SC-300, AZ-500, SC-100) are highly desirable.
• Experience leading cloud security, IAM and governance initiatives.

Responsibilities

• Lead Cloud Security governance, standards and assurance activities.
• Drive identity and access management controls, including MFA and PAM.
• Design and review cloud security and IAM solutions with risk and compliance considerations.
• Develop cyber security awareness and promote secure cloud usage.

Skills

Cloud Security

IAM

Risk management

Security governance

Security architecture

Education

Bachelor’s degree in Computer Science / IT / Cyber Security or related

Tools

Azure

Microsoft Entra ID

Microsoft 365

PAM (Privileged Access Management)

Job description

Southern Ports operates the gateway ports of Albany, Bunbury, and Esperance, connecting regional WA to global markets. We focus on safe, efficient, and sustainable port operations, delivering value to our customers and communities. With a strong commitment to our people, we’re building a diverse, high-performing workforce to support the future of regional trade.

Benefits of Joining Southern Ports

Joining Southern Ports Authority comes with numerous benefits that cater to a wide range of professional and personal needs, some examples being:

Flexible Working Arrangements: Enjoy a work-life balance that suits your lifestyle and personal commitments.

Annual Health and Well-being Benefits: Take advantage of programs and resources aimed at maintaining your physical and mental health.

Salary Sacrificing Options: Maximise your take-home pay through tailored salary packaging arrangements such as Novated Car Leasing and Superannuation

Opportunity to Travel: Experience different geographical regions in Western Australia, enhancing your professional and personal growth.

Generous Purchase Leave Options: Gain additional leave options to suit your personal needs and preferences.

$148,897 per annum – Increasing to $156,342 on January 1st 2027 + 12% Superannuation + regional allowance if based regionally.

The Role

Southern Ports is recruiting a Fixed Term Full Time Cyber Security Analyst (Cloud & IAM) until 30th June 2028 to join their team based at our Perth office. Reporting to the Cyber Security Lead the Cyber Security Analyst will be responsible for the governance, risk management, assurance and continuous improvement of Southern Ports' Cloud Security and Identity and Access Management (IAM) capabilities. The role serves as a recognised subject matter expert, providing expert security leadership, influencing technology decisions and ensuring security controls effectively manage organisational risk. The position is responsible for driving cyber security maturity to strengthen Southern Ports' cyber security posture, resilience and compliance obligations. All business activities of this role are in line with Southern Ports' mission, vision and corporate values.

Key Duties and Responsibilities

Act as Southern Ports' lead subject matter expert for Cloud Security governance, standards and assurance activities.

Lead the continuous improvement of identity and access management controls including authentication, authorisation, access governance and privileged access management controls.

Lead the design and review of complex cloud security and identity solutions, evaluating major design options, business impacts, risks and trade-offs that align with security standards, risk appetite and compliance obligations.

Develop and deliver cyber security awareness initiatives that promote the secure use of cloud technologies and effective management of user identities and access.

Relevant tertiary qualifications in Computer Science, Information Technology, Cyber Security or a related discipline.

Microsoft Certified Identity and Access Administrator Associate (SC-300)

Significant specialist experience in Cloud Security, Identity and Access Management (IAM) and cyber security governance within a complex organisational environment.

Demonstrated experience developing, implementing and maintaining cloud security and identity governance frameworks, standards, controls and assurance activities across Microsoft cloud environments, including Azure, Microsoft Entra ID and Microsoft 365.

Demonstrated experience leading and delivering cloud security and IAM initiatives, including the implementation of security controls, risk assessments, business case development, project delivery, security uplift programs and contemporary security capabilities such as MFA, PAM, PIM and Zero Trust.

Demonstrated ability to provide strategic cyber security advice, influence decision-making and engage effectively with senior stakeholders on cloud security, identity governance, risk, compliance and cyber resilience matters.

Ability to travel to Southern Ports locations (Albany, Bunbury, Esperance, and Perth)

Microsoft Certified Azure Security Engineer Associate (AZ-500)

Microsoft Certified Cybersecurity Architect Expert (SC-100)

ISC2 CCSP

ISACA Cloud+

Demonstrated experience designing, implementing and optimising Cloud Security Posture Management (CSPM), SaaS Security Posture Management (SSPM), Identity Governance and Administration (IGA), and Privileged Access Management (PAM) capabilities within a complex enterprise environment.

Demonstrated experience leading and delivering secure-by-design initiatives, including the application of Secure Software Development Lifecycle (SDLC), Software Composition Analysis (SCA) and Software Bill of Materials (SBOM) practices within cloud and technology delivery programs.

Experience developing, implementing and assessing cyber security controls within regulated, government or critical infrastructure environments, including the application of frameworks such as the Essential Eight, Australian Government ISM, SOCI Act and WA Government Cyber Security Policy.

Demonstrated experience developing executive reports, governance papers, business cases and risk assessments, with the ability to communicate complex cyber security concepts and recommendations to technical and non-technical stakeholders.

Strong stakeholder engagement, influencing and relationship management skills, with experience working across business, technology, vendor and government stakeholder groups.

Requirements

To be eligible for this role, applicants must reside either Perth, Bunbury, Albany or Esperance and provide proof of Australian citizenship or permanent residency.

The successful applicant must:

Be able to obtain and maintain a Maritime Security Identification Card

Pass a pre-employment medical assessment including drug and alcohol testing

Provide a National Police Certificate that is within a 6-month period.

Southern Ports is proud to be an Equal Employment Opportunity employer and does not discriminate against race, gender, age, religion, sexual preference or disability. We encourage applications from all culturally diverse backgrounds, Indigenous Australians and Non-Indigenous Australians. Southern Ports is committed to creating and maintaining an inclusive and impartial workplace with equal opportunities for all employees.

Applications close: COB 20 November 2026

We reserve the right to commence the recruitment process during the application period.

The Southern Ports Authority was established on the 1st of October 2014 following the merger of the Albany Port Authority, Bunbury Port Authority, and Esperance Port Authority.

The legislation enabling the merger of the ports, The Ports Legislation Amendment Act 2014, was given Royal Assent on 20 May 2014.

The merger of the previous three port authorities was initiated by a comprehensive review of Western Australia’s ports commissioned in 2010. The scope of the review was to look at all matters concerning port operations, port governance and port performance to ensure that Western Australia’s ports could continue to respond to the demands of the State’s rapidly growing economy.