Hybrid Senior Cyber GRC Lead: Risk & Assurance

WorkCover Queensland; Brisbane; Hybrid; AUD 120,000 - 170,000; Full time

Benefits offered by this job

Hybrid work arrangements

Learning & development

Health & wellbeing program

Job summary

WorkCover Queensland is seeking a Senior Cyber GRC Analyst to strengthen governance, risk and assurance across the organisation. You’ll lead cyber risk assessments, drive the assurance program and provide trusted advice to senior stakeholders.

The role requires extensive experience in cyber security, GRC, and regulated environments, with knowledge of NIST CSF, ISO 27001, Essential Eight, CCM v4 and IS18, plus hands-on cloud security with Azure and AWS.

Qualifications

• Extensive experience in cyber security, technology risk, cyber governance or a related discipline within complex and regulated environments.
• Demonstrated expertise in cyber assurance programs and in assessing the design and operating effectiveness of security controls.
• Proven experience leading complex cyber risk assessments, including third-party due diligence and remediation strategies.
• Advanced knowledge and practical application of NIST Cybersecurity Framework, ISO 27001, Essential Eight, CCM v4 and IS18.

Responsibilities

• Lead the design, delivery and continuous improvement of WorkCover's cyber assurance program.
• Lead complex cyber risk assessments, including third-party due diligence, risk evaluation and remediation.
• Assess the design and operating effectiveness of cyber security controls and provide evidence-based recommendations.
• Provide expert GRC advice to senior and executive stakeholders, translating technical issues into clear business impacts.
• Coordinate cyber governance delivery, balancing priorities, governance activities and emerging risks to achieve timely outcomes.
• Develop meaningful cyber risk, control and performance reporting to support governance oversight and strategic decision-making.
• Strengthen cyber security policies, standards, frameworks and risk management practices.
• Build cyber risk capability and strengthen risk ownership through cross-functional engagement and awareness initiatives.

Skills

Cyber risk management

GRC

Stakeholder communication

Mentoring

Cross-functional delivery

Tools

GRC platforms

Microsoft security products

Azure

AWS

Job description

WorkCover Queensland is seeking a Senior Cyber GRC Analyst to strengthen governance, risk and assurance across the organisation. You’ll lead cyber risk assessments, drive the assurance program and provide trusted advice to senior stakeholders.

The role requires extensive experience in cyber security, GRC, and regulated environments, with knowledge of NIST CSF, ISO 27001, Essential Eight, CCM v4 and IS18, plus hands-on cloud security with Azure and AWS.