Senior Cyber GRC Analyst (Projects)

Reserve Bank of Australia; Sydney; Hybrid; AUD 140,000 - 190,000; Full time

Benefits offered by this job

Hybrid work environment

Job summary

The Reserve Bank of Australia is seeking a Senior Cyber GRC Analyst to join the Cyber Risk & Compliance team on a 2-year fixed-term contract until November 2028. The role focuses on proactive cyber risk management, regulatory compliance, and maturing the Bank's cybersecurity posture.

You will partner with Lines 1 and 2, map to 3LoA, and support audits and resilience activities within a high-performing IT Cyber function.

Qualifications

• Minimum 3 years in a dedicated cybersecurity role focused on risk and compliance.
• Experience in cyber control testing and automated control assurance.
• Strong understanding of enterprise risk management and 3LoA model.

Responsibilities

• Partner with business units to strengthen cyber risk management per 3LoA.
• Identify cyber risk and compliance challenges aligned with objectives.
• Conduct third‑party cyber risk assessments and provide assurance.
• Maintain cyber risk & control library mapping to Top 37, E8, and NIST CSF.
• Aggregate system-level risks for enterprise reporting.
• Support audits (SWIFT CSP, ISO 27001, CPS 234).
• Coordinate cyber audit activities across the Bank.
• Support business continuity planning and cyber resilience reviews.
• Develop automated cyber control assurance approach.

Skills

Cyber risk management

Regulatory compliance

Stakeholder engagement

Control testing

Automation of controls

Tools

NIST CSF

Top 37

Essential Eight

Job description

Hybrid work environment

2 Year Fixed Term Contract November 2028

Help shape the future of an iconic Australian institution.

Join a high-impact team shaping cyber risk, resilience and regulatory compliance.

AGSVA 'Baseline' security clearance required

About the business/role/team

The Reserve Bank of Australia (RBA) is seeking a Senior Cyber GRC Analyst to join our Cyber Risk & Compliance team on a 2-year fixed-term contract until November 2028. Reporting to the Manager, Cyber Risk & Compliance, you'll work within a high-performing Cybersecurity team, proactively identifying and managing cyber risks, supporting regulatory compliance and helping uplift the Bank's cybersecurity maturity.

About the role

In this role, you will partner with Line 1 business units and collaborate with Risk Management (Line 2) to deliver accurate and timely cyber risk reporting. You'll help maintain alignment with the Bank's enterprise risk management framework under the 'Three Lines of Accountability' (3LoA) model and ensure compliance with standards such as CPS 234, ISO 27001, and the ACSC Top 37.

Reporting to the Manager, Cyber Risk and Compliance, you will be part of a multi-disciplinary IT Cyber function and responsible for:

• Partnering with business units and Line 2 stakeholders to strengthen cyber risk management practices in line with the Bank's 3LoA model.
• Identifying and anticipating cyber risk and compliance challenges aligned with strategic and operational objectives.
• Conducting third‑party cyber risk assessments and providing ongoing assurance based on vendor risk profiles.
• Maintaining and updating the cyber risk & control library and taxonomy, including mapping to frameworks such as Top 37, Essential Eight (E8), and NIST CSF.
• Aggregating system-level risks and issues for departmental and enterprise reporting.
• Supporting internal and external audits (e.g., SWIFT CSP, ISO 27001, CPS 234).
• Coordinating and executing cyber audit activities across the Bank.
• Driving cyber operational resilience by supporting Business Impact Analysis and Business Continuity Planning reviews, and cyber operational risk assurance activities.
• Maintaining and reporting on risk scenarios, Bowtie analyses, and risk profiles for both Line 1 and Line 2 departments.
• Applying deep understanding of risk and compliance frameworks, preferably within central banking or financial services.
• Leading and coordinating cyber control testing activities in line with the Risk and Compliance Management Framework.
• Developing and embedding an automated approach to cyber control assurance, improving efficiency and effectiveness.

The successful candidate will also be required to undertake an AGSVA 'Baseline' security clearance.

About you

You are passionate about cybersecurity, risk, and compliance, and enjoy sharing that passion with others. You bring a collaborative mindset and a strong ability to influence stakeholders across the RBA. To be successful in this critical role you will possess the following skills:

• At least 3 years of experience in a dedicated cybersecurity role, with a focus on risk and compliance.
• Extensive experience in cyber control testing, including the design and implementation of automated control assurance techniques.
• Strong understanding of enterprise risk management frameworks, 3LoA model and regulatory standards.
• Proven ability to engage and influence stakeholders across Lines 1 and 2.
• Familiarity with cyber control frameworks and enterprise risk reporting tools.
• Experience with Business Continuity Management and cyber risk assurance in complex operational environments.
• Experience with third-party risk management and audit coordination.

Highly Desirable

• Experience in cyber risk and compliance roles within financial services or central banking

Be More

Working for an organisation that truly makes a difference to the people of Australia, we can offer development and career opportunities in a collaborative environment that supports your growth, wellbeing and promotes flexibility. Your individual growth and success drives the RBA forward as an organisation. Be more means you can do more, for yourself and for Australia.

Why RBA?

The RBA makes an important contribution to the Australian economy through the pursuit of national economic policy objectives and associated activities in financial markets and banking. We also issue Australia's banknotes and operate infrastructure critical to the payments system, all of which contribute to the welfare of the Australian people. Made up of specialists across a wide range of fields, our people, values, and culture play a critical role in achieving our objectives. Striving to be Open & Dynamic, we consider and incorporate different perspectives, work across teams and are transparent with each other, whilst delivering quality together effectively and focusing on outcomes by prioritising, testing, learning, and refining as we go. Our people conduct themselves with a high degree of integrity, while st