IT Risk and Compliance Analyst

ISS Facility Services Australia and New Zealand; City of Melbourne; On-site; AUD 80,000 - 100,000; Full time

Benefits offered by this job

Flexible work arrangements

Learning & development programs

Exclusive staff discounts

Job summary

A leading facilities management company is seeking an experienced IT Risk and Compliance Analyst to join their Melbourne CBD office. The role involves supporting cybersecurity and compliance operations, conducting risk assessments, and coordinating audits. Candidates should have a relevant degree and an understanding of IT infrastructure. The company offers flexible work arrangements, development programs, and a positive team culture. Join us to make a difference in maintaining a secure technology environment.

Qualifications

• Foundational understanding of vulnerability management and endpoint security.
• Knowledge of IT risk management principles and compliance frameworks.
• Strong written communication skills for documentation and reporting.

Responsibilities

• Support vulnerability management by analyzing scan results and documenting risks.
• Assist with IT risk assessments and compliance documentation.
• Coordinate patch management by tracking exceptions and maintaining dashboards.

Skills

Understanding of cybersecurity concepts

Ability to translate technical information

Attention to detail

Education

Certificate, Diploma, or Bachelor’s degree in Information Technology

Tools

Vulnerability scanning tools (e.g., Rapid7, Qualys)

Job description

📢 We’re Hiring: IT Risk and Compliance Analyst

Be part of something bigger. Be part of ISS.

We’re looking for an experienced IT Risk and Compliance Analyst, to be based out of our Melbourne CBD office, employed on a Full-Time basis.

🛠 Purpose and Responsibilities

This position is responsible for supporting the ISS Pacific’s cybersecurity, vulnerability management, IT risk, and compliance operations by assisting in the identification, analysis, documentation, and coordination of key security and governance activities across the technology environment.

Reporting to the IT Risk & Compliance Specialist, you will work closely with Infrastructure, Applications Solutions and Security Operations teams to ensure risks are identified and managed, vulnerabilities are remediated in a timely manner, and governance obligations are consistently met. You will also collaborate with internal stakeholders, vendors and external auditors to maintain accurate compliance records, support security assurance activities, and contribute to ongoing cybersecurity uplift initiatives.

As a key member of the IT Risk and Compliance function, you will demonstrate professionalism, accountability, and a strong willingness to learn, supporting the organisation’s commitment to maintaining a secure and compliant technology landscape.

• Support vulnerability management by analysing scan results, documenting risks, tracking remediation, and assisting with BAS activities.
• Assist with IT risk assessments, policy maintenance, compliance documentation, and audit evidence collection.
• Help coordinate patch management by compiling patch data, tracking exceptions, and maintaining dashboards.
• Contribute to cybersecurity projects through meeting coordination, documentation, and basic technical support.
• Support security audits by gathering data, updating asset lists, documenting findings, and tracking remediation.
• Assist with client security questionnaires by preparing evidence packs and maintaining standard compliance documentation.

🎁 What We Offer

• Flexible work arrangements tailored to you.
• Melbourne CBD office – central location easily accessible by public transport
• Exclusive staff discounts with a wide range of partners.
• Learning & development programs to support your career growth.
• Global career pathways – opportunities to grow within ISS worldwide.
• A positive team culture where your success is celebrated.

✅ What You’ll Bring

Key Skills, Knowledge, and Experience

Qualifications & Foundational Knowledge

• Certificate, Diploma, or Bachelor’s degree in Information Technology, Cybersecurity, Information Systems, or a related discipline.
• Foundational understanding of cybersecurity concepts, including vulnerability management, patching, and endpoint security.
• General knowledge of IT infrastructure, including servers, endpoints, networks, and asset management.
• Familiarity with vulnerability scanning tools such as Rapid7, Qualys, or Nessus, with the ability to interpret and triage basic findings.
• Understanding of patch management processes, remediation tracking, and compliance reporting.
• Knowledge of IT risk management principles, security controls, and compliance frameworks including ISO 27001, NIST Cybersecurity Framework (CSF), Australian Essential Eight
• Basic understanding of identity and access management (IAM) concepts, including single sign-on (SSO).

Communication & Stakeholder Engagement

• Strong written communication skills, with the ability to document risks, audit findings, remediation actions, and project updates clearly.
• Ability to translate technical information into clear, concise summaries for non-technical stakeholders.
• Effective collaboration with Infrastructure, Security, SOC, and Audit teams to support security and compliance outcomes.
• Proactive stakeholder follow‑up to ensure remediation actions and compliance tasks are completed on time.

Coordination, Reporting & Documentation

• High attention to detail when maintaining dashboards, trackers, and compliance documentation.
• Strong coordination skills for meetings, project updates, audits, and evidence gathering.
• Ability to maintain and manage libraries of documentation, including standard responses, policies, procedures, and compliance artefacts.

Bonus qualifications and experience (Desirable)

• CompTIA Security+ and ITIL Foundation
• Experience participating in audits (internal and external)

How to Apply

Click on the 'apply' link and complete the online application.

Our Commitment

ISS fosters a culture of inclusion and diversity, welcoming applications from Aboriginal and Torres Strait Islander peoples, veterans, people with disabilities, individuals from diverse cultural backgrounds, and LGBTIQA+ communities. We are committed to fair pay and a safe working environment.

Learn more about ISS in Australia and New Zealand on our website.

Please note: No agency applications are accepted