Mid-Level Information Security Analyst

M&T Resources; Brisbane; Hybrid; AUD 90,000 - 120,000; Full time

Job summary

M&T Resources in Brisbane CBD is seeking a Mid-Level Information Security Analyst to join a growing Threat Management team within the Information Security function. The role focuses on governance, risk, assurance and vulnerability management, working with business and technology stakeholders to strengthen the organisation’s security posture.

You’ll coordinate security assessments, manage remediation activities, support third-party security reviews and drive security best practices across the

Qualifications

• 3–6 years’ experience in Information Security, Cyber Security, GRC, Security Assurance, or Technology Risk.
• Strong understanding of security governance, risk, and compliance principles.
• Experience with vulnerability management and remediation activities.
• Knowledge of ISO 27001 and NIST frameworks.
• Strong stakeholder engagement and communication skills.
• Ability to manage competing priorities and deliver outcomes.

Responsibilities

• Manage vulnerabilities and remediation activities.
• Coordinate security testing and assurance reviews.
• Conduct third-party security assessments.
• Support security governance, risk, and compliance initiatives.
• Track and report on security risks and remediation progress.
• Partner with business and technology stakeholders to improve security controls and processes.

Skills

Information Security

GRC

Vulnerability Mgmt

ISO 27001

NIST

Stakeholder Eng

Delivery Focus

Financial Sector

Job description

• Be part of a growing threat management team
• National organisation / hybrid working / Brisbane CBD location
• Contract role with possible extension / Great rate on offer

Role We’re on the lookout for a Mid-Level Information Security Analystto join a reputable organisation in Brisbane CBD and become part of a growing Threat Management team within the Information Security function.

This role is focused on cyber security governance, risk, assurance, and vulnerability management, working closely with business and technology stakeholders to strengthen the organisations’ security posture.

You’ll play a key role in coordinating security assessments, managing remediation activities, supporting third-party security reviews, and driving security best practices across the business.

Main Responsibilities

• Manage vulnerabilities and remediation activities.
• Coordinate security testing and assurance reviews.
• Conduct third-party security assessments.
• Support security governance, risk, and compliance initiatives.
• Track and report on security risks and remediation progress.
• Partner with business and technology stakeholders to improve security controls and processes.

Key Skills Required

• 3 – 6 years’ experience in Information Security, Cyber Security, GRC, Security Assurance, or Technology Risk.
• Strong understanding of security governance, risk, and compliance principles.
• Experience with vulnerability management and remediation activities.
• Knowledge of security frameworks such as ISO 27001 and NIST.
• Strong stakeholder engagement and communication skills.
• Ability to manage competing priorities and deliver outcomes.
• Previous experience working in financial organisations or highly regulated environments would be an asset.