GRC Cyber Security Analyst - Hybrid, Growth & Learning

WorkCover Queensland; Brisbane; Hybrid; AUD 100,000 - 140,000; Full time

Benefits offered by this job

Hybrid work arrangements

Learning and development opportunities

Health and wellbeing program

Study assistance

Job summary

WorkCover Queensland is seeking a Cyber Security GRC Analyst on a 12-month contract to strengthen governance, risk and compliance across the organisation. You will conduct risk assessments, assess controls, support audits and certifications, and translate regulatory requirements into practical security measures while collaborating with IT and business teams.

The role focuses on shaping cyber resilience, policies, standards and continuous improvement within a collaborative, cross-functional

Qualifications

• Experience conducting cyber risk assessments and reporting on controls.
• Knowledge of NIST CSF and ISO 27001 standards.
• Experience supporting audits and remediation of risks.
• Ability to translate regulatory requirements into practical cyber security controls and governance processes.

Responsibilities

• Conduct cyber risk assessments and control assurance.
• Assess design and operating effectiveness of cyber security controls.
• Coordinate evidence for audits and certification activities.
• Identify cyber risks, control gaps and remediation with stakeholders.
• Develop reporting and insights to support risk-based decisions.
• Contribute to policy and framework improvements.
• Monitor emerging cyber risks and regulatory requirements.

Skills

Cyber security

Risk assessment

Stakeholder engagement

Analytical thinking

Communication skills

Education

Tertiary qualification in cyber security

Tools

GRC platform

Azure

AWS

Job description

WorkCover Queensland is seeking a Cyber Security GRC Analyst on a 12-month contract to strengthen governance, risk and compliance across the organisation. You will conduct risk assessments, assess controls, support audits and certifications, and translate regulatory requirements into practical security measures while collaborating with IT and business teams.

The role focuses on shaping cyber resilience, policies, standards and continuous improvement within a collaborative, cross-functional