IT Security and Compliance Analyst

u&u Recruitment Partners; Sydney; On-site; AUD 90,000 - 130,000; Full time

Job summary

u&u Recruitment Partners is seeking an IT Security & Compliance Analyst in Sydney to strengthen governance, risk and compliance while delivering hands-on security support across the business. You will help implement and improve the security and compliance framework with exposure to audits, policy development and regulatory alignment.

You will collaborate with stakeholders across national offices, support security operations, risk assessments, and training programs, and contribute to ongoing

Qualifications

• Bachelor's degree in Cyber Security, Information Security, IT, or related discipline.
• 3-4 years' experience in cyber security, information security, GRC, or compliance-focused role.
• Strong understanding of ISO 27001 and/or NIST CSF.
• Experience with Microsoft Entra ID (Azure AD), MFA, and identity management.
• Experience with Microsoft Intune or similar endpoint management platforms.
• Exposure to cyber security risk assessments, audits, and compliance activities.
• Ability to interpret technical information and communicate it clearly to non-technical stakeholders.
• Strong organisational skills with the ability to manage competing priorities.

Responsibilities

• Governance & security frameworks: Support development and enhancement of information security services; assist with policies, standards, and procedures; contribute to governance programs.
• Security operations: Monitor and respond to security incidents and alerts; support risk management activities; assist with BC/DR testing.
• Compliance & risk: Conduct compliance reviews and gap assessments; align with ISO 27001 and NIST CSF; assist with third-party security assessments; participate in audits and remediation.
• Reporting & security awareness: Prepare security reports and dashboards; support awareness initiatives; develop training materials; advise stakeholders on security matters.
• Technical security support: Provide input into technology projects; support identity management; assist with security configuration for applications; advise across infrastructure and services.

Skills

Cyber security frameworks

Azure AD / MFA

Endpoint management (Intune)

Risk assessments & audits

Communication with stakeholders

Project management & prioritisation

Education

Bachelor's degree in Cyber Security

Job description

Are you a cyber security professional who enjoys balancing governance, risk, compliance, and hands-on operational security? Do you want to play a key role in strengthening security capability within a leading national professional services organisation?

We are partnering with a well-established and highly regarded professional services firm to recruit an IT Security & Compliance Analyst to join their Sydney team. This is an excellent opportunity for a security professional looking to broaden their experience across security operations, risk management, compliance, reporting, business continuity, and security awareness initiatives.

Working within a collaborative and supportive technology team, you'll be instrumental in enhancing security practices, supporting regulatory compliance, and driving continuous improvement across the business.

The opportunity

As the IT Security & Compliance Analyst, you will contribute to the development, implementation, and ongoing improvement of the organisation's cyber security and compliance framework.

This role offers exposure to a broad range of security disciplines and the opportunity to work closely with stakeholders across multiple national offices.

Are you a cyber security professional who enjoys balancing governance, risk, compliance, and hands-on operational security? Do you want to play a key role in strengthening security capability within a leading national professional services organisation?

We are partnering with a well-established and highly regarded professional services firm to recruit an IT Security & Compliance Analyst to join their Sydney team. This is an excellent opportunity for a security professional looking to broaden their experience across security operations, risk management, compliance, reporting, business continuity, and security awareness initiatives.

Working within a collaborative and supportive technology team, you'll be instrumental in enhancing security practices, supporting regulatory compliance, and driving continuous improvement across the business.

The opportunity

As the IT Security & Compliance Analyst, you will contribute to the development, implementation, and ongoing improvement of the organisation's cyber security and compliance framework.

This role offers exposure to a broad range of security disciplines and the opportunity to work closely with stakeholders across multiple national offices.

Key responsibilities

Governance & security frameworks

• Support the ongoing development and enhancement of information security services;
• Assist with developing and maintaining cyber security policies, standards, and procedures; and
• Contribute to governance initiatives and continuous improvement programs.

Key responsibilities

Governance & security frameworks

• Support the ongoing development and enhancement of information security services;
• Assist with developing and maintaining cyber security policies, standards, and procedures; and
• Contribute to governance initiatives and continuous improvement programs.

Security operations

• Monitor and respond to cyber security incidents and alerts;
• Support vulnerability and risk management activities;
• Assist with business continuity planning (BCP) and disaster recovery (DR) testing; and
• Track emerging security threats, trends, and industry developments.

Compliance & risk

• Conduct compliance reviews and gap assessments against regulatory and industry requirements;
• Support alignment with recognised security frameworks such as ISO 27001 and NIST CSF;
• Assist with third-party security assessments and due diligence activities;
• Participate in security audits and remediation activities; and
• Review and assess information security risks across the business.

Reporting & security awareness

• Prepare security reports, dashboards, and KPI/KRI reporting for management;
• Support the delivery of cyber security awareness initiatives;
• Contribute to developing security training materials and programs; and
• Provide guidance to stakeholders on security-related matters.

Technical security support

• Provide cyber security input into technology projects and operational processes;
• Support identity and access management activities;
• Assist with security configuration and management of business applications; and
• Provide security-focused advice across infrastructure, applications, and services.

About you

We're looking for a proactive and motivated cyber security professional who combines strong technical understanding with excellent communication and stakeholder engagement skills.

Required skills & experience

• Bachelor's degree in Cyber Security, Information Security, Information Technology, or related discipline;
• Approximately 3-4 years' experience in a cyber security, information security, GRC, or compliance-focused role;
• Strong understanding of cyber security frameworks and standards including ISO 27001 and/or NIST CSF;
• Experience with Microsoft Entra ID (Azure AD), MFA, and identity management;
• Experience with Microsoft Intune or similar endpoint management platforms;
• Exposure to cyber security risk assessments, audits, and compliance activities;
• Ability to interpret technical information and communicate it clearly to non-technical stakeholders; and
• Strong organisational skills with the ability to manage competing priorities.

Highly regarded

• Previous experience within a legal, professional services, financial services, or similarly regulated environment;
• Experience developing training programs and security awareness initiatives; and
• Familiarity with business continuity and disaster recovery planning.

At u&u Recruitment Partners, we value diversity, equity and inclusion. We welcome applications from Aboriginal and Torres Strait Islander people, people with diverse cultural and linguistic backgrounds and people with disability.

Should you require reasonable adjustments or have a preferred method of communication throughout the recruitment process, we encourage you to make a request.

Additionally, for a barrier-free and inclusive online experience, you can access u&u’s opportunities using accessibility software Recite Me.