Senior Cyber GRC Analyst

WorkCover Queensland; Brisbane; Hybrid; AUD 120,000 - 170,000; Full time

Benefits offered by this job

Hybrid work arrangements

Learning & development

Health & wellbeing program

Job summary

WorkCover Queensland is seeking a Senior Cyber GRC Analyst to strengthen governance, risk and assurance across the organisation. You’ll lead cyber risk assessments, drive the assurance program and provide trusted advice to senior stakeholders.

The role requires extensive experience in cyber security, GRC, and regulated environments, with knowledge of NIST CSF, ISO 27001, Essential Eight, CCM v4 and IS18, plus hands-on cloud security with Azure and AWS.

Qualifications

• Extensive experience in cyber security, technology risk, cyber governance or a related discipline within complex and regulated environments.
• Demonstrated expertise in cyber assurance programs and in assessing the design and operating effectiveness of security controls.
• Proven experience leading complex cyber risk assessments, including third-party due diligence and remediation strategies.
• Advanced knowledge and practical application of NIST Cybersecurity Framework, ISO 27001, Essential Eight, CCM v4 and IS18.

Responsibilities

• Lead the design, delivery and continuous improvement of WorkCover's cyber assurance program.
• Lead complex cyber risk assessments, including third-party due diligence, risk evaluation and remediation.
• Assess the design and operating effectiveness of cyber security controls and provide evidence-based recommendations.
• Provide expert GRC advice to senior and executive stakeholders, translating technical issues into clear business impacts.
• Coordinate cyber governance delivery, balancing priorities, governance activities and emerging risks to achieve timely outcomes.
• Develop meaningful cyber risk, control and performance reporting to support governance oversight and strategic decision-making.
• Strengthen cyber security policies, standards, frameworks and risk management practices.
• Build cyber risk capability and strengthen risk ownership through cross-functional engagement and awareness initiatives.

Skills

Cyber risk management

GRC

Stakeholder communication

Mentoring

Cross-functional delivery

Tools

GRC platforms

Microsoft security products

Azure

AWS

Job description

WorkCover Queensland is entering an exciting new chapter, guided by a renewed strategic focus and strong executive leadership shaping our 2030 Strategy. We're embarking on an enterprise-wide transformation to strengthen our impact and continue making a positive difference in people's lives.

The Opportunity

At WorkCover Queensland, cyber security plays an important role in protecting the information and services that support Queensland workers and employers. We're looking for an experienced Senior Cyber GRC Analyst to help strengthen our cyber resilience and mature how we manage governance, risk, compliance and assurance across the organisation.

This is a senior and influential role where you'll lead complex cyber risk and assurance activities, shape WorkCover's cyber assurance program and provide trusted advice to senior and executive stakeholders. You'll translate complex cyber security issues into clear business impacts, helping leaders understand risk exposure, control effectiveness and remediation priorities

You'll work across Cyber Security and the broader organisation to strengthen cyber policies, standards and risk management practices, while coordinating governance activities and helping embed stronger cyber risk ownership across WorkCover

Key Responsibilities:

• Lead the design, delivery and continuous improvement of WorkCover's cyber assurance program.
• Lead complex cyber risk assessments, including third-party due diligence, risk evaluation and remediation.
• Assess the design and operating effectiveness of cyber security controls and provide evidence-based recommendations.
• Provide expert GRC advice to senior and executive stakeholders, translating technical issues into clear business impacts.
• Coordinate cyber governance delivery, balancing priorities, governance activities and emerging risks to achieve timely outcomes.
• Develop meaningful cyber risk, control and performance reporting to support governance oversight and strategic decision-making.
• Strengthen cyber security policies, standards, frameworks and risk management practices.
• Build cyber risk capability and strengthen risk ownership through cross-functional engagement and awareness initiatives.

About You

You're an experienced cyber security, technology risk or GRC professional who can see the bigger picture while still getting into the detail. You're comfortable navigating complex risk and assurance challenges, constructively challenging decisions and providing clear, pragmatic advice that helps stakeholders make informed decisions.

You'll bring:

• Extensive experience in cyber security, technology risk, cyber governance or a related discipline within complex and regulated environments.
• Demonstrated expertise in cyber assurance programs and assessing the design and operating effectiveness of security controls.
• Proven experience leading complex cyber risk assessments, including third-party due diligence and remediation strategies.
• Advanced knowledge and practical application of NIST Cybersecurity Framework, ISO 27001, Essential Eight, CCM v4 and IS18.
• Experience leading activities across cyber governance, risk, audit and compliance.
• Experience developing cyber risk and performance indicators and presenting meaningful insights to governance forums and senior stakeholders.
• Strong technical understanding of Microsoft security products and cloud environments including Azure and AWS.
• Experience with GRC platforms supporting risk oversight, assurance and reporting.
• Strong communication and influencing skills, including the ability to constructively challenge and provide authoritative advice to senior stakeholders.
• The ability to mentor others, coordinate cross-functional delivery and manage competing priorities.

If you're looking for an opportunity to influence cyber risk and assurance at an enterprise level, shape senior decision-making and help strengthen WorkCover Queensland's cyber resilience, we'd love to hear from you.

Why Join Us

Our vision is to be the best workers' compensation insurer, making a positive difference to people's lives and keeping Queenslanders working. At WorkCover, we deliver with heart, own our outcomes, work best together and stay open to what's possible - and we're looking for people who share these values

When you join us, you'll benefit from:

• A purpose-driven organisation where your work genuinely makes a positive impact on Queenslanders' lives
• A collaborative and supportive team environment that values empathy, trust and working together
• Hybrid work arrangements that support flexibility and work-life balance
• Personalised learning and development opportunities to support your growth and career progression
• A holistic health and wellbeing program designed to support you both professionally and personally
• Study assistance to support ongoing education and professional development

You can find out more about what it's like to work with us by visiting Working atWorkCoverQld.

If this sounds like you, we'd love to hear from you. Applications close 5pm, Friday , 30th October .

We are committed to ensuring WorkCover reflects the diversity of the Queensland community. We welcome applications from First Nations peoples, members of the LGBTQIA+SB community, people of all ages, people who are neurodivergent, people with disability, and people from culturally and linguistically diverse backgrounds.

Acceptance of applications submitted after advertising closes is at the discretion of the selection panel.

To ensure you have the best and most inclusive experience, please let us know if you require any reasonable adjustments or accommodations to help you confidently showcase your skills and potential. You can contact us at ***********@workcoverqld.com.au or let our recruitment team know during your conversation with them.

Pre-employment checks will be conducted on all prospective employees. This includes a Right to Work in Australia Check, Police Check, Education Check, Reference Check, and where appropriate a Visa Check. The information provided will be treated as confidential in accordance with the Information Privacy Act 2009 (Qld). All permanent appointments are subject to a probationary period in accordance with our policy.

Be careful - Don't provide your bank or credit card details when applying for jobs. Don't transfer any money or complete suspicious online surveys. If you see something suspicious, report this job ad .