Security Compliance Risk Analyst

Cubic Corporation; Sydney; On-site; AUD 120,000 - 180,000; Full time

Job summary

Cubic Corporation is seeking an Information Security Compliance professional to support production transaction processing environments by evaluating security controls and preparing the scope of IT compliance programs.

You will coordinate with internal and external auditors to ensure adherence to PCI-DSS, ISO 27001, and SOC frameworks, while actively managing remediation and reporting through the OneTrust GRC system.

Qualifications

• Strong written and oral communication skills in English.
• Ability to effectively collaborate with team members, clients, IT management, staff and business units.
• Familiarity with PCI DSS 4, ISO 27001-2022, and SOC I/II audits.
• Able to adapt to changing audit requirements and matrixed IT environments.

Responsibilities

• Perform as the recognized Subject Matter Expert on Security Risk Assessment methodology, policy, strategy and processes.
• Facilitate security audit operations, including scheduling, vendor coordination, program and stakeholder coordination.
• Coordinate with internal/external auditors and IT teams to complete periodic audits.
• Lead control reviews and assessments to support continuous compliance with security policies and standards.
• Manage security review processes to meet PCI-DSS, ISO 27001, SOC 1 & SOC 2 and regional requirements.

Skills

English communication

MS Office

Cross-functional collaboration

PCI DSS 4

ISO 27001-2022

SOC I/II

Stakeholder engagement

Adaptable

Tools

OneTrust GRC

Job description

Cubic Corporation is seeking an Information Security Compliance professional to support production transaction processing environments by evaluating security controls and preparing the scope of IT compliance programs.

You will coordinate with internal and external auditors to ensure adherence to PCI-DSS, ISO 27001, and SOC frameworks, while actively managing remediation and reporting through the OneTrust GRC system.