Senior Cyber Security Analyst

randstad digital australia; Adelaide; On-site; AUD 165,000 - 248,000; Full time

Job summary

SA Government Department is seeking a Senior Cyber Security Analyst in Adelaide to lead risk management, security architecture evaluation, and policy governance across enterprise systems. The role focuses on threat modelling, controls evaluation, and compliance strategy to safeguard sensitive data under SA security frameworks and privacy mandates.

You will work with project managers, solution architects, and external partners to implement risk-based security improvements, ensuring adherence to

Qualifications

• Degree/Diploma in Computer Science, CyberSecurity, IT or equivalent practical industry experience.
• Experience with the SACSF is preferred.
• Demonstrated knowledge of information systems, threat management and standards including AS/NZS ISO/IEC 27001/27002, AS/NZS 31000, SACSF and Australian Government ISM.

Responsibilities

• Execute enterprise cyber risk management and security architecture evaluations across systems.
• Author and operationalise enterprise cybersecurity policies and governance strategies.
• Deploy risk assessment methodologies across infrastructure and drive remediation roadmaps.
• Provide cyber risk guidance to project managers and solution architects.
• Ensure milestones adhere to privacy legislation and cross-agency guidelines.

Skills

Threat modelling

Governance & policy

Stakeholder communication

Security risk management

Enterprise security

Education

Degree/Diploma in Computer Science, CyberSecurity, IT

Tools

Splunk

CrowdStrike

Job description

Engagement: Initial Contract through to EOFY June 2027 and high notion to extend

Location: Adelaide, SA

Rates: Hourly / Daily (Super or GST)

Role Purpose

The Senior Cyber Security Analyst will work on critical cyber risk management, security architecture evaluation, dynamic risk assessments and policy governance across enterprise systems within an Adelaide based SA Government Department. A key focus of this role is driving threat modelling, controls evaluations and compliance strategy, ensuring sensitive data complies with South Australian security frameworks and privacy mandates.

Key Responsibilities

• Execute enterprise cyber risk management, security architecture evaluations, dynamic risk assessments and technical policy governance across systems.
• Author, update and operationalise enterprise cybersecurity policies, operational standards and governance strategies aligned with the SACSF, ISMF, ISM guidelines.
• Deploy dynamic risk assessment methodologies across new and existing infrastructure, identifying system vulnerabilities and driving technical remediation roadmaps.
• Provide specialised cyber risk expertise and guidance to project managers, solution architects and external partners.
• Ensure all project milestones strictly adhere to privacy legislation, whole-of-government security directives and cross-agency information-sharing guidelines.

Key Attributes

• Operates independently without requiring direct oversight, taking full ownership of governance and risk deliverables.
• Combines strong communication and composure to engage constructively with high-stakes stakeholders, navigate competing priorities, and articulate complex risk profiles with clarity.
• Capable of balancing strategic innovation against team energy and operational demands, adjusting interpersonal and working styles to fit project needs.

Qualifications & Technical Experience

• Degree/Diploma in Computer Science, CyberSecurity, IT, or equivalent practical industry experience.
• Experience with the South Australian Cyber Security Framework (SACSF) is preferred.
• Demonstrated experience and knowledge of information systems, threat management and security and risk standards including AS/NZS ISO/IEC 27001, AS/NZS ISO/IEC 27002, AS/NZS 31000, the South Australian Cyber Security Framework and Australian Government Information Security Manual.
• Direct or indirect working experience with a South Australian Government department or agency is highly advantageous.
• Exceptional written, verbal, and interpersonal communication skills, with a proven ability to draft executive risk reports, negotiate technical outcomes and explain complex concepts clearly to non-technical stakeholders.
• Familiarity or knowledge of SIEM and endpoint security platforms (such as Splunk / CrowdStrike) is advantageous, but not mandatory.
• Demonstrate knowledge and commitment to promoting and creating a safe and inclusive work environment.

Applicants with Full Working Rights in Australia will be considered for this position.

This role is not offered as a remote position.

We actively encourage applications from any background.

Experience

8 years