Hybrid InfoSec Analyst: Ops, Risk & Delivery

Excite Cyber Pty Ltd; North Sydney Council; Hybrid; AUD 90,000 - 120,000; Full time

Job summary

Excite Cyber Pty Ltd is seeking an Information Security Analyst to join our Cybersecurity team in a unique hybrid role, working across a key customer environment and Excite Cyber.

This hands-on opportunity focuses on the operational side of cybersecurity while also building experience across risk, governance, vulnerability management and client delivery. The role offers exposure to different security environments, technologies and stakeholders.

Qualifications

• Experience in information security operations, cyber risk, IT security or a related role.
• Practical experience reviewing security alerts, vulnerabilities, scan results or security control evidence.
• Working knowledge of vulnerability management, DLP, information classification, security monitoring and technology lifecycle risk.
• Strong analytical and problem-solving skills.
• Excellent attention to detail and the ability to maintain accurate, traceable records.
• Strong written and verbal communication skills, with the ability to explain technical findings to both technical and non-technical stakeholders.

Responsibilities

• Triage security enquiries, alerts and events and coordinate investigation, response and escalation.
• Monitor and manage vulnerabilities from identification through to remediation, residual risk review and escalation.
• Review vulnerability intelligence, security scans, penetration testing findings and vendor advisories.
• Investigate data loss prevention (DLP) incidents and alerts and support the ongoing improvement of DLP and information classification controls.
• Support security monitoring and tooling across areas such as email security, audit monitoring and threat intelligence.
• Maintain vulnerability, asset and security risk registers with accurate ownership, status and supporting evidence.
• Monitor technology assets for end-of-support and lifecycle risks and coordinate action with relevant stakeholders.
• Prepare clear security reporting for operational and executive audiences.
• Support Excite Cyber's internal security activities and contribute to client cybersecurity engagements.
• Identify opportunities to improve security processes, control coverage, reporting and operational efficiency.

Skills

Information security operations

Cyber risk

Vulnerability management

Security governance

Analytical thinking

Communication

Education

Security+ or equivalent certifications (desirable)

ISO 27001 Foundation/Practitioner (desirable)

Tools

Forcepoint

Netwrix Auditor

Proofpoint

Recorded Future

BitSight

Qualys

Microsoft security technologies

Job description

Excite Cyber Pty Ltd is seeking an Information Security Analyst to join our Cybersecurity team in a unique hybrid role, working across a key customer environment and Excite Cyber.

This hands-on opportunity focuses on the operational side of cybersecurity while also building experience across risk, governance, vulnerability management and client delivery. The role offers exposure to different security environments, technologies and stakeholders.