Junior Security Analyst

asx; Sydney; On-site; AUD 90,000 - 130,000; Full time

Job summary

ASX is seeking a cyber governance professional to strengthen risk and compliance controls across the technology function. You will analyse data, develop dashboards, and work with security teams to maturate IT general controls.

You will partner with cyber SMEs, maintain governance artefacts, and produce evidence for audits while enhancing transparency across the risk landscape.

Qualifications

• 2-4 years' experience in cyber or technology governance, risk, compliance or assurance roles, with exposure to data-driven reporting and metrics.
• Working knowledge of cyber control domains such as identity and access management, detection and monitoring, patching and vulnerability management.
• Good understanding of frameworks and standards, such as NIST CSF, ISO 27001, ASD Essential Eight, CPS 234, COBIT and MITRE ATT&CK.
• Demonstrated ability to analyse and visualise technical data using tools such as Power BI, Tableau or advanced Excel.
• Good written and verbal communication skills, including the ability to translate technical or complex data into insights for technical and non-technical audiences.
• Proven ability to manage multiple governance artefacts, such as control registers, penetration-testing findings, exception logs, dashboards and evidence, with attention to accuracy and version control.
• Skilled in coordination, reporting and stakeholder engagement across technical and risk functions.

Responsibilities

• Support vulnerability management analysis and reporting.
• Support the uplift and documentation of cyber security controls using best-practice frameworks (NIST, etc.).
• Partner with cyber subject matter experts to assess, plan, remediate and uplift IT General Controls.
• Develop and maintain cyber governance dashboards and metrics for compliance.
• Consolidate and analyse data from vulnerability scanners, CMDB and identity systems for gaps and trends.
• Translate IT general security control definitions into traceable, actionable metrics.
• Translate technical data into clear visual insights for IT leaders and risk committees using BI tools.
• Prepare assurance, audit and regulatory artefacts with high-quality evidence packs.
• Support automated reporting and integration into risk systems and data platforms.
• Maintain documentation repositories and version-controlled artefacts.
• Maintain custom code in GitLab per development standards.
• Identify opportunities to automate cyber reporting and data flows.
• Collaborate with Security Operations Centre and other security teams.

Education

CISA

Tools

Power BI

Tableau

Excel

Job description

ASX: Powering Australia's financial markets

Why join the ASX?

When you join ASX, you're joining a company with a strong purpose - to power a stronger economic future by enabling a fair and dynamic marketplace for all. In your new role, you'll be part of a leading global securities exchange with a strong brand. We are known for being a trusted market operator and an exciting data hub. www.asx.com.au/about/careers/a-great-place-to-work

We are more than a securities exchange!

We run critical market infrastructure, with 1 in 3 people employed within technology. Yet we have a unique complexity of roles across a range of disciplines such as operations, program delivery, financial products, investor engagement, risk and compliance.

We're proud to foster a workplace where diversity is celebrated and inclusion is part of our everyday culture. Our employee-led networks champion LGBTIQ+ inclusion, promote gender equality, accessibility and wellbeing, inspire giving and volunteering, and celebrate cultural and religious events, creating a sense of belonging for all. As an AWEI Bronze employer and member of the Champions of Change Coalition for gender equality, we're committed to a fair and inclusive workplace where everyone can thrive.

YOUR RESPONSIBILITIES

• Support vulnerability management analysis and reporting.
• Support the uplift and documentation of cyber security controls in line with best-practice frameworks, including NIST, focusing on key domains such as Identity and Access Management, Detection and Monitoring, and Vulnerability Management.
• Partner with cyber subject matter experts to assess, plan, remediate and uplift IT General Controls, including strengthening definitions, evidence requirements and reporting.
• Develop and maintain cyber governance dashboards and metrics to demonstrate compliance with cyber security requirements and obligations across key control domains, such as patching, vulnerability management and identity.
• Consolidate and analyse technical data from sources such as vulnerability scanners, CMDB and identity systems to identify compliance gaps and emerging trends.
• Translate IT general security control definitions and governance cadence into traceable, actionable and sustainable metrics.
• Translate technical data into clear visual insights for different audiences, including IT service owners, senior management and risk committees, using tools such as Power BI, Tableau or advanced Excel.
• Prepare assurance, audit and regulatory artefacts by coordinating high-quality evidence and reporting packs.
• Support the uplift of automated reporting and integration into the risk system, ServiceNow and other data platforms to enhance transparency of cyber health.
• Maintain documentation repositories, exception registers and data sources to ensure traceability and version control across governance artefacts.
• Maintain any custom code in GitLab in accordance with development standards.
• Identify opportunities to automate and streamline cyber reporting, metrics and control-related data flows.
• Work with the Security Operations Centre and other security teams where required.

YOUR EXPERIENCE AND QUALIFICATIONS

Must have

• 2-4 years' experience in cyber or technology governance, risk, compliance or assurance roles, with exposure to data-driven reporting and metrics.
• Working knowledge of cyber control domains such as identity and access management, detection and monitoring, patching and vulnerability management.
• Good understanding of frameworks and standards, such as NIST CSF, ISO 27001, ASD Essential Eight, CPS 234, COBIT and MITRE ATT&CK.
• Demonstrated ability to analyse and visualise technical data using tools such as Power BI, Tableau or advanced Excel.
• Good written and verbal communication skills, including the ability to translate technical or complex data into insights for technical and non-technical audiences.
• Proven ability to manage multiple governance artefacts, such as control registers, penetration-testing findings, exception logs, dashboards and evidence, with attention to accuracy and version control.
• Skilled in coordination, reporting and stakeholder engagement across technical and risk functions.

Nice to have

• Experience supporting or reporting on IT General Controls or control-effectiveness outcomes.
• Familiarity with enterprise risk systems and their data structures.
• Familiarity with Security Information and Event Management tools, such as Elastic.
• Exposure to data integration or automation between systems such as CMDB, vulnerability management and reporting tools.
• Experience developing or enhancing cyber, technology or risk dashboards.
• Knowledge of data storytelling or visual communication principles to convey risk posture and control effectiveness.
• Professional certifications such as CISA,