GRC Cyber Security Analyst (ISO/NIST) - Melbourne Contract

FourQuarters Recruitment; City of Melbourne; On-site; AUD 148,000 - 203,000; Full time

Job summary

FourQuarters Recruitment represents a well established financial services organisation in Melbourne seeking a hands-on cyber GRC specialist to uplift regulatory controls aligned to APRA CPS 230/234, NIST CSF and ISO 27001. You will assess controls, support third-party risk, map assets, conduct testing, and contribute to ISMS documentation, liaising with risk, vendor management and security teams.

Contract role with short notice start, Melbourne based, offering a competitive day rate and exposure

Qualifications

• Experience in cyber security GRC or information security within regulated industries.
• Knowledge of NIST CSF and ISO/IEC 27001; ISO Lead Auditor/Implementer is a plus.
• Familiarity with APRA CPS 230/CPS 234 or similar regimes.
• Ability to translate technical findings into business risk language for stakeholders.
• Contract role; Melbourne-based; available on short notice.

Responsibilities

• Assess and uplift security controls against ISO/IEC 27001 and the NIST CSF functions.
• Support third-party risk assessments, including security due diligence and control testing.
• Map critical operations/assets against frameworks and identify gaps.
• Conduct control testing, evidence collection, and maturity assessments ahead of audits.
• Contribute to ISMS documentation, policies, standards, risk treatment plans.

Skills

Cyber security GRC experience

Regulatory knowledge

Stakeholder communication

Financial services domain

Tools

NIST CSF

ISO/IEC 27001

APRA CPS 230/ CPS 234

Job description

FourQuarters Recruitment represents a well established financial services organisation in Melbourne seeking a hands-on cyber GRC specialist to uplift regulatory controls aligned to APRA CPS 230/234, NIST CSF and ISO 27001. You will assess controls, support third-party risk, map assets, conduct testing, and contribute to ISMS documentation, liaising with risk, vendor management and security teams.

Contract role with short notice start, Melbourne based, offering a competitive day rate and exposure