Cyber Security Analyst: Vulnerability Management Lead

Snowy Hydro Limited; Sydney; On-site; AUD 110,000 - 160,000; Full time

Job summary

Snowy Hydro Limited is seeking a mid-level operational Cyber Security Analyst to join our team in Sydney or Melbourne. This hands-on role will lead the vulnerability management capability and work on assurance and risk management activities.

You will protect the organisation's information systems, networks and data by monitoring, identifying, analysing and remediating security vulnerabilities, while supporting ongoing improvement of cybersecurity controls across IT and OT environments.

Qualifications

• Lead the vulnerability management lifecycle from discovery to remediation.
• Support audits and compliance with AESCSF, SoCI Act, ISO 27001.
• Align security requirements across projects and vendors.
• Conduct security risk assessments and define treatment plans.
• Communicate effectively with stakeholders at all levels.

Responsibilities

• End-to-End Vulnerability Management (70% Focus): lead lifecycle across IT/OT and deploy vuln mgmt technologies.
• Compliance & Risk Assessments: support audits and ensure AESCSF/SoCI/ISO27001 alignment.
• Project Security Alignment: ensure projects deliver secure controls.
• Cyber Security Assurance: conduct assessments across systems and third parties; identify gaps and recommendations.
• Risk Assessments: evaluate risks and define treatment plans with stakeholders.

Skills

Vulnerability management

Tenable

Qualys

EDR

SIEM

PAM

SASE/Netskope

Firewalls

IDAM

Tools

Tenable

Qualys

Job description

Snowy Hydro Limited is seeking a mid-level operational Cyber Security Analyst to join our team in Sydney or Melbourne. This hands-on role will lead the vulnerability management capability and work on assurance and risk management activities.

You will protect the organisation's information systems, networks and data by monitoring, identifying, analysing and remediating security vulnerabilities, while supporting ongoing improvement of cybersecurity controls across IT and OT environments.