Remote-Eligible GRC Analyst: Cyber Risk & Governance

Southern Ports; Perth; On-site; AUD 149,000 - 156,000; Full time

Benefits offered by this job

Flexible working

Health & well-being

Salary packaging

Travel opportunities

Purchase leave

Job summary

Southern Ports in Western Australia seeks a GRC Analyst on a fixed-term contract until 30 June 2028, with flexible locations in Perth, Bunbury, Albany or Esperance. You will strengthen technology governance, security and risk management by independently assessing risks across vendors, applications and technology solutions, and support the Cyber Uplift Program.

The role offers meaningful impact in a critical organisation and requires strong cybersecurity knowledge, 2+ years of risk assessment

Qualifications

• Relevant tertiary qualification in IT, Cybersecurity, Computer Science or a related field.
• 2+ years’ experience in technology risk assessment.
• Strong knowledge of cybersecurity and IT risk frameworks, including NIST, ISO 27001, ASD ISM and SOC 2.
• Understanding of enterprise IT environments, cloud security and application security principles.
• Strong analytical, problem-solving and critical-thinking skills.
• Excellent communication and stakeholder engagement skills.
• Preferred certifications such as CISSP, CISA, CISM or CySA+.

Responsibilities

• Conduct risk assessments of new and existing vendors, applications and technology solutions.
• Assess cybersecurity, compliance, resilience, vulnerabilities and security controls.
• Identify security and risk gaps and recommend practical mitigation strategies.
• Assess technology delivery risks across architecture, projects, development and deployment.
• Prepare clear risk reports and communicate findings to stakeholders and senior management.
• Support continuous improvement of risk processes and alignment with security policies and WA Government requirements.

Skills

Analytical thinking

Risk assessment experience

Cybersecurity knowledge

Communication skills

Stakeholder engagement

Education

Tertiary IT/Cybersecurity/CS degree

Tools

NIST framework

ISO 27001

ASD ISM

SOC 2

Job description

Southern Ports in Western Australia seeks a GRC Analyst on a fixed-term contract until 30 June 2028, with flexible locations in Perth, Bunbury, Albany or Esperance. You will strengthen technology governance, security and risk management by independently assessing risks across vendors, applications and technology solutions, and support the Cyber Uplift Program.

The role offers meaningful impact in a critical organisation and requires strong cybersecurity knowledge, 2+ years of risk assessment