Cyber Security GRC Analyst | 12month Contract

WorkCover Queensland; Brisbane; Hybrid; AUD 100,000 - 140,000; Full time

Benefits offered by this job

Hybrid work arrangements

Learning and development opportunities

Health and wellbeing program

Study assistance

Job summary

WorkCover Queensland is seeking a Cyber Security GRC Analyst on a 12-month contract to strengthen governance, risk and compliance across the organisation. You will conduct risk assessments, assess controls, support audits and certifications, and translate regulatory requirements into practical security measures while collaborating with IT and business teams.

The role focuses on shaping cyber resilience, policies, standards and continuous improvement within a collaborative, cross-functional

Qualifications

• Experience conducting cyber risk assessments and reporting on controls.
• Knowledge of NIST CSF and ISO 27001 standards.
• Experience supporting audits and remediation of risks.
• Ability to translate regulatory requirements into practical cyber security controls and governance processes.

Responsibilities

• Conduct cyber risk assessments and control assurance.
• Assess design and operating effectiveness of cyber security controls.
• Coordinate evidence for audits and certification activities.
• Identify cyber risks, control gaps and remediation with stakeholders.
• Develop reporting and insights to support risk-based decisions.
• Contribute to policy and framework improvements.
• Monitor emerging cyber risks and regulatory requirements.

Skills

Cyber security

Risk assessment

Stakeholder engagement

Analytical thinking

Communication skills

Education

Tertiary qualification in cyber security

Tools

GRC platform

Azure

AWS

Job description

Cyber Security GRC Analyst | 12month Contract

WorkCover Queensland is entering an exciting new chapter, guided by a renewed strategic focus and strong executive leadership shaping our 2030 Strategy. We’re embarking on an enterprise-wide transformation to strengthen our impact and continue making a positive difference in people’s lives.

The Opportunity

At WorkCover Queensland, cyber security plays an important role in protecting the information and services that support Queensland workers and employers. We’re looking for a Cyber Security GRC Analyst to help strengthen our cyber governance, risk and compliance capability and contribute to our ongoing cyber resilience.

Working within our Cyber Security team, you’ll conduct cyber risk assessments, assess the effectiveness of security controls and support assurance, audit and compliance activities. You’ll partner with technical and business stakeholders to identify cyber risks and control gaps, support practical remediation and provide advice that enables informed decision-making.

You’ll also contribute to the continuous improvement of our cyber security policies, standards, frameworks and processes, while turning cyber risk and compliance information into meaningful insights that strengthen risk ownership across the organisation.

Key Responsibilities:

• Conduct cyber risk assessments, control assurance and compliance activities in line with WorkCover’s Information Security Management System, regulatory obligations and approved cyber security frameworks.
• Assess the design and operating effectiveness of cyber security controls, documenting findings, evidence, risk implications and recommended improvements.
• Support internal audits and external certification activities by coordinating evidence, validating controls and maintaining accurate and traceable assurance records.
• Partner with technical and business stakeholders to identify cyber risks, control gaps and compliance issues and support sustainable remediation.
• Analyse cyber risk, control and compliance information to develop meaningful reporting and insights that support risk-based decisions.
• Provide practical cyber governance and risk advice and contribute to improvements across policies, standards, frameworks and processes.
• Monitor emerging cyber risks, regulatory requirements and industry developments, and contribute to initiatives that strengthen cyber awareness and risk ownership.

About You

You’re an analytical and collaborative cyber professional who enjoys understanding risk, working through complex issues and turning security requirements into practical outcomes. You can communicate clearly with technical and non-technical stakeholders and enjoy working across teams to strengthen cyber security practices.

You’ll bring:

• Experience in cyber security, technology risk, security governance or a related discipline within a complex or regulated environment.
• Experience conducting cyber risk assessments and assessing and reporting on the effectiveness of cyber security controls.
• Working knowledge of NIST Cybersecurity Framework, ISO 27001, Essential Eight and IS18, or comparable standards.
• Experience supporting audits, compliance activities, control assurance and remediation of cyber risks and control gaps.
• The ability to interpret regulatory, policy and framework requirements and translate them into practical cyber security controls and governance processes.
• Experience maintaining accurate and auditable cyber risk, control and compliance records within a GRC platform.
• Sound knowledge of cyber security technologies, Microsoft security products and cloud environments such as Azure and AWS.
• Strong analytical, communication and stakeholder engagement skills, with the ability to manage competing priorities and contribute to cross-functional outcomes.
• A tertiary qualification in cyber security, information technology or a related discipline, or equivalent relevant professional experience.

If you’re looking to broaden your experience across cyber governance, risk, assurance and compliance while contributing to stronger cyber resilience at WorkCover Queensland, we’d love to hear from you.

Why Join Us

Our vision is to be the best workers’ compensation insurer, making a positive difference to people’s lives and keeping Queenslanders working. At WorkCover, we deliver with heart, own our outcomes, work best together and stay open to what’s possible - and we’re looking for people who share these values

When you join us, you’ll benefit from:

• A purpose‑driven organisation where your work genuinely makes a positive impact on Queenslanders’ lives
• A collaborative and supportive team environment that values empathy, trust and working together
• Hybrid work arrangements that support flexibility and work–life balance
• Personalised learning and development opportunities to support your growth and career progression
• A holistic health and wellbeing program designed to support you both professionally and personally
• Study assistance to support ongoing education and professional development

You can find out more about what it’s like to work with us by visiting Working atWorkCoverQld.

If this sounds like you, we’d love to hear from you. Applications close 5pm, Wednesday, 4th November.

We are committed to ensuring WorkCover reflects the diversity of the Queensland community. We welcome applications from First Nations peoples, members of the LGBTQIA+SB community, people of all ages, people who are neurodivergent, people with disability, and people from culturally and linguistically diverse backgrounds.

Acceptance of applications submitted after advertising closes is at the discretion of the selection panel.

To ensure you have the best and most inclusive experience, please let us know if you require any reasonable adjustments or accommodations to help you confidently showcase your skills and potential. You can contact us at ***********@workcoverqld.com.au or let our recruitment team know during your conversation with them.

Pre-employment checks will be conducted on all prospective employees. This includes a Right to Work in Australia Check, Police Check, Education Check, Reference Check, and where appropriate a Visa Check. The information provided will be treated as confidential in accordance with the Information Privacy Act 2009 (Qld). All permanent appointments are subject to a probationary period in accordance with our policy.