Security Risk & Compliance Analyst

cubic; Sydney; On-site; AUD 140,000 - 200,000; Full time

Job summary

Cubic Transportation Systems (CTS) is expanding its information security team in Australia. You will provide security compliance support for production environments, evaluate control posture, and align with policies and controls.

The role partners with auditors to drive PCI-DSS, ISO 27001, and other audits, often with substantial decision-making authority. Typically operating under limited supervision, you will identify risks, develop mitigation plans, and coordinate remediation with

Qualifications

• Experience implementing PCI-DSS, ISO 27001, SOC 1 & SOC 2 in enterprise environments.
• Ability to coordinate audits with internal and external auditors.

Responsibilities

• Perform as the security SME on risk assessment methodology, policy, and processes.
• Coordinate security audit operations, including scheduling and stakeholder coordination.
• Liaise with internal/external auditors and IT teams to complete periodic audits and tracking follow-ups.
• Lead design and control reviews to sustain continuous compliance with security standards.
• Manage security review processes for solutions to meet PCI-DSS, ISO 27001, SOC 1 & SOC 2 and regional requirements.
• Identify and report information security risks across applications, data centers, cloud, and vendors.
• Develop remediation plans and escalate issues to owners for timely resolution.
• Document controls monitoring in systems like OneTrust and ensure proper governance.
• Engage with customers and Cubic Security Teams to build positive outcomes.

Job description

Cubic Transportation Systems (CTS) is expanding its information security team in Australia. You will provide security compliance support for production environments, evaluate control posture, and align with policies and controls.

The role partners with auditors to drive PCI-DSS, ISO 27001, and other audits, often with substantial decision-making authority. Typically operating under limited supervision, you will identify risks, develop mitigation plans, and coordinate remediation with