Security Governance & Risk Specialist — Vulnerability Management

M&T Resources; Brisbane; On-site; AUD 90,000 - 130,000; Full time

Job summary

M&T Resources in Brisbane CBD is seeking a Mid-Level Information Security Specialist to join the Threat Management team within the Information Security function. You will focus on governance, risk, assurance and vulnerability management, collaborating with business and technology stakeholders to strengthen security posture.

You will coordinate security assessments, oversee remediation, support third-party reviews and promote best practices across the organisation while balancing competing

Qualifications

• 3–6 years’ experience in Information Security, Cyber Security, GRC, Security Assurance, or Technology Risk.
• Strong understanding of security governance, risk, and compliance principles.
• Experience with vulnerability management and remediation activities.
• Knowledge of security frameworks such as ISO 27001 and NIST.
• Strong stakeholder engagement and communication skills.
• Ability to manage competing priorities and deliver outcomes.
• Previous experience working in financial organisations or highly regulated environments would be an asset.

Responsibilities

• Manage vulnerabilities and remediation activities.
• Coordinate security testing and assurance reviews.
• Conduct third-party security assessments.
• Support security governance, risk, and compliance initiatives.
• Track and report on security risks and remediation progress.
• Partner with business and technology stakeholders to improve security controls and processes.

Skills

Information Security

Cyber Security

GRC

Security Assurance

Technology Risk

Governance

Risk Management

Compliance

Vulnerability Management

Stakeholder Engagement

Communication

Job description

M&T Resources in Brisbane CBD is seeking a Mid-Level Information Security Specialist to join the Threat Management team within the Information Security function. You will focus on governance, risk, assurance and vulnerability management, collaborating with business and technology stakeholders to strengthen security posture.

You will coordinate security assessments, oversee remediation, support third-party reviews and promote best practices across the organisation while balancing competing