GRC Analyst

Southern Ports; Perth; On-site; AUD 149,000 - 156,000; Full time

Benefits offered by this job

Flexible working

Health & well-being

Salary packaging

Travel opportunities

Purchase leave

Job summary

Southern Ports in Western Australia seeks a GRC Analyst on a fixed-term contract until 30 June 2028, with flexible locations in Perth, Bunbury, Albany or Esperance. You will strengthen technology governance, security and risk management by independently assessing risks across vendors, applications and technology solutions, and support the Cyber Uplift Program.

The role offers meaningful impact in a critical organisation and requires strong cybersecurity knowledge, 2+ years of risk assessment

Qualifications

• Relevant tertiary qualification in IT, Cybersecurity, Computer Science or a related field.
• 2+ years’ experience in technology risk assessment.
• Strong knowledge of cybersecurity and IT risk frameworks, including NIST, ISO 27001, ASD ISM and SOC 2.
• Understanding of enterprise IT environments, cloud security and application security principles.
• Strong analytical, problem-solving and critical-thinking skills.
• Excellent communication and stakeholder engagement skills.
• Preferred certifications such as CISSP, CISA, CISM or CySA+.

Responsibilities

• Conduct risk assessments of new and existing vendors, applications and technology solutions.
• Assess cybersecurity, compliance, resilience, vulnerabilities and security controls.
• Identify security and risk gaps and recommend practical mitigation strategies.
• Assess technology delivery risks across architecture, projects, development and deployment.
• Prepare clear risk reports and communicate findings to stakeholders and senior management.
• Support continuous improvement of risk processes and alignment with security policies and WA Government requirements.

Skills

Analytical thinking

Risk assessment experience

Cybersecurity knowledge

Communication skills

Stakeholder engagement

Education

Tertiary IT/Cybersecurity/CS degree

Tools

NIST framework

ISO 27001

ASD ISM

SOC 2

Job description

Southern Ports operates the gateway ports of Albany, Bunbury, and Esperance, connecting regional WA to global markets. We focus on safe, efficient, and sustainable port operations, delivering value to our customers and communities. With a strong commitment to our people, we’re building a diverse, high-performing workforce to support the future of regional trade.

Benefits of Joining Southern Ports

Joining Southern Ports Authority comes with numerous benefits that cater to a wide range of professional and personal needs, some examples being:

Flexible Working Arrangements: Enjoy a work-life balance that suits your lifestyle and personal commitments.

Annual Health and Well-being Benefits: Take advantage of programs and resources aimed at maintaining your physical and mental health.

Salary Sacrificing Options: Maximise your take-home pay through tailored salary packaging arrangements such as Novated Car Leasing and Superannuation

Opportunity to Travel: Experience different geographical regions in Western Australia, enhancing your professional and personal growth.

Generous Purchase Leave Options: Gain additional leave options to suit your personal needs and preferences.

$148,897 + superannuation + regional allowance if based regionally, increasing to $156,342 + superannuation + regional allowance from 1 January 2027.

The Role

Join Southern Ports as a GRC Analyst on a fixed-term contract until 30 June 2028, with the flexibility to work from any of our locations in Perth, Bunbury, Albany or Esperance.

Play a key role in strengthening technology governance, security and risk management by independently assessing risks across vendors, applications and technology solutions. You’ll also support our Cyber Uplift Program, helping enhance Southern Ports’ cybersecurity posture and resilience.

If you’re passionate about technology risk, governance and making a meaningful impact, this is an exciting opportunity to contribute to a critical organisation while working from a location that suits you.

Key Duties and Responsibilities

Conduct risk assessments of new and existing vendors, applications and technology solutions.

Assess cybersecurity, compliance, resilience, vulnerabilities and security controls.

Identify security and risk gaps and recommend practical mitigation strategies.

Assess technology delivery risks across architecture, projects, development and deployment.

Prepare clear risk reports and communicate findings to stakeholders and senior management.

Support continuous improvement of risk processes and alignment with security policies and WA Government requirements.

Required

Relevant tertiary qualification in IT, Cybersecurity, Computer Science or a related field, with 2+ years’ experience in technology risk assessment.

Strong knowledge of cybersecurity and IT risk frameworks, including NIST, ISO 27001, ASD ISM and SOC 2.

Understanding of enterprise IT environments, cloud security and application security principles.

Strong analytical, problem-solving and critical-thinking skills, with the ability to translate technical risks into business impacts.

Excellent communication and stakeholder engagement skills, with strong attention to detail and ability to work collaboratively.

Preferred

Relevant cybersecurity or IT certifications are desirable, such as CISSP, CISA, CISM or CySA+.

Knowledge of technology risk, regulatory compliance and security requirements, including the SOCI Act and WA Government Cyber Security Policy.

Experience in regulated environments, with an understanding of procurement, vendor management and contractual risk.

Understanding of SDLC and secure development practices, with strong report writing skills.

Requirements

To be eligible for this role, applicants must reside either Perth, Bunbury, Albany or Esperance and provide proof of Australian citizenship or permanent residency.

The successful applicant must:

• Have a current Western Australian driver’s licence
• Be able to obtain and maintain a Maritime Security Identification Card
• Pass a pre-employment medical assessment including drug and alcohol testing
• Provide a National Police Certificate that is within a 6-month period.

Southern Ports is proud to be an Equal Employment Opportunity employer and does not discriminate against race, gender, age, religion, sexual preference or disability. We encourage applications from all culturally diverse backgrounds, Indigenous Australians and Non-Indigenous Australians. Southern Ports is committed to creating and maintaining an inclusive and impartial workplace with equal opportunities for all employees.

We reserve the right to commence the recruitment process during the application period.