Cyber Security Analyst: Risk, Incidents & Compliance

Hobart City Council; Hobart; Hybrid; AUD 94,000 - 114,000; Full time

Job summary

Hobart City Council is seeking a Cyber Security Analyst to protect Council systems and data from cyber threats at the Town Hall. You will identify risks, develop policies, monitor incidents and support a proactive security culture across the organisation.

You will bring strong knowledge of security frameworks such as ISO 27001, NIST, the Essential Eight and the Privacy Act, plus experience with audits and penetration testing. Tertiary qualification in IT or Cyber Security is preferred.

Qualifications

• Tertiary qualifications in Information Technology, Cyber Security, Computer Science or related discipline.
• Professional certifications such as CISSP, CISM, CISA or CEH are highly regarded.
• Experience in local government, public sector or cloud security is advantageous.

Responsibilities

• Lead identification, analysis and mitigation of cyber security risks across Council systems and data.
• Develop, implement and review cyber security policies, procedures, controls and incident response plans.
• Monitor security alerts, coordinate incident responses and conduct investigations and root-cause analysis.
• Conduct security audits, vulnerability assessments and penetration testing.
• Manage security platforms such as SIEM, firewalls, endpoint protection and intrusion detection or prevention systems.
• Provide authoritative advice, reports, training and security awareness support to staff, managers and senior leaders.
• Embed cyber security considerations into organisational projects, procurement and change initiatives.

Skills

Cyber security

Risk management

Incident response

Policy development

Education

Bachelor's degree in IT/Cyber Security

Tools

SIEM

Firewalls

Endpoint protection

IDS/IPS

Job description

Hobart City Council is seeking a Cyber Security Analyst to protect Council systems and data from cyber threats at the Town Hall. You will identify risks, develop policies, monitor incidents and support a proactive security culture across the organisation.

You will bring strong knowledge of security frameworks such as ISO 27001, NIST, the Essential Eight and the Privacy Act, plus experience with audits and penetration testing. Tertiary qualification in IT or Cyber Security is preferred.