Mid-Level Information Security Specialist

M&T Resources; Brisbane; On-site; AUD 90,000 - 130,000; Full time

Job summary

M&T Resources in Brisbane CBD is seeking a Mid-Level Information Security Specialist to join the Threat Management team within the Information Security function. You will focus on governance, risk, assurance and vulnerability management, collaborating with business and technology stakeholders to strengthen security posture.

You will coordinate security assessments, oversee remediation, support third-party reviews and promote best practices across the organisation while balancing competing

Qualifications

• 3–6 years’ experience in Information Security, Cyber Security, GRC, Security Assurance, or Technology Risk.
• Strong understanding of security governance, risk, and compliance principles.
• Experience with vulnerability management and remediation activities.
• Knowledge of security frameworks such as ISO 27001 and NIST.
• Strong stakeholder engagement and communication skills.
• Ability to manage competing priorities and deliver outcomes.
• Previous experience working in financial organisations or highly regulated environments would be an asset.

Responsibilities

• Manage vulnerabilities and remediation activities.
• Coordinate security testing and assurance reviews.
• Conduct third-party security assessments.
• Support security governance, risk, and compliance initiatives.
• Track and report on security risks and remediation progress.
• Partner with business and technology stakeholders to improve security controls and processes.

Skills

Information Security

Cyber Security

GRC

Security Assurance

Technology Risk

Governance

Risk Management

Compliance

Vulnerability Management

Stakeholder Engagement

Communication

Job description

Mid-Level Information Security Specialist

Role

We're on the lookout for a Mid-Level Information Security Specialist to join a reputable organisation in Brisbane CBD and become part of a growing Threat Management team within the Information Security function.

This role is focused on cyber security governance, risk, assurance, and vulnerability management, working closely with business and technology stakeholders to strengthen the organisation's security posture.

You'll play a key role in coordinating security assessments, managing remediation activities, supporting third-party security reviews, and driving security best practices across the business.

Main Responsibilities

• Manage vulnerabilities and remediation activities.
• Coordinate security testing and assurance reviews.
• Conduct third-party security assessments.
• Support security governance, risk, and compliance initiatives.
• Track and report on security risks and remediation progress.
• Partner with business and technology stakeholders to improve security controls and processes.

Key Skills Required

• 3 – 6 years’ experience in Information Security, Cyber Security, GRC, Security Assurance, or Technology Risk.
• Strong understanding of security governance, risk, and compliance principles.
• Experience with vulnerability management and remediation activities.
• Knowledge of security frameworks such as ISO 27001 and NIST.
• Strong stakeholder engagement and communication skills.
• Ability to manage competing priorities and deliver outcomes.
• Previous experience working in financial organisations or highly regulated environments would be an asset.