Senior Cyber GRC Analyst - 2-Year Contract (Hybrid)

Reserve Bank of Australia; Australia; Hybrid; AUD 120,000 - 180,000; Full time

Job summary

The Reserve Bank of Australia is seeking a Senior Cyber GRC Analyst to join our Cyber Risk & Compliance team on a 2-year fixed-term contract until November 2028. You will partner with Line 1 business units to deliver accurate cyber risk reporting and support compliance with CPS 234, ISO 27001, and the ACSC Top 37.

Reporting to the Manager, Cyber Risk & Compliance, you will lead cyber risk assessments, maintain risk libraries, coordinate audits, and drive cyber operational resilience across the

Qualifications

• Minimum 3 years in a dedicated cybersecurity role focused on risk and compliance.
• Extensive experience in cyber control testing and automated assurance techniques.
• Strong understanding of enterprise risk management frameworks and 3LoA.
• Ability to engage and influence stakeholders across Lines 1 and 2.
• Familiarity with cyber control frameworks and enterprise risk reporting tools.
• Experience with Business Continuity Management and cyber risk assurance.
• Experience with third-party risk management and audit coordination.
• Desirable: experience in financial services or central banking.

Responsibilities

• Partner with business units and Line 2 stakeholders to strengthen cyber risk management in line with 3LoA.
• Identify and anticipate cyber risk and compliance challenges aligned with objectives.
• Conduct third-party cyber risk assessments and provide assurance based on vendor risk profiles.
• Maintain and update the cyber risk & control library and taxonomy, mapping to Top 37, Essential Eight and NIST CSF.
• Aggregate system-level risks and issues for reporting.
• Support internal and external audits (e.g., SWIFT CSP, ISO 27001, CPS 234).
• Coordinate and execute cyber audit activities across the Bank.
• Drive cyber operational resilience via BIAs and BC planning reviews.
• Maintain and report risk scenarios, Bowtie analyses, and risk profiles for Lines 1 and 2.
• Apply deep understanding of risk and compliance frameworks; lead testing activities.

Skills

Cyber risk management

Regulatory standards

Control testing

Stakeholder influence

Frameworks and reporting

Business Continuity Management

Third-party risk management

Financial services/central banking

Job description

The Reserve Bank of Australia is seeking a Senior Cyber GRC Analyst to join our Cyber Risk & Compliance team on a 2-year fixed-term contract until November 2028. You will partner with Line 1 business units to deliver accurate cyber risk reporting and support compliance with CPS 234, ISO 27001, and the ACSC Top 37.

Reporting to the Manager, Cyber Risk & Compliance, you will lead cyber risk assessments, maintain risk libraries, coordinate audits, and drive cyber operational resilience across the