Senior Cyber Security Analyst

WebHosting; Brisbane; On-site; AUD 120,000 - 180,000; Full time

Job summary

Megaport in Brisbane is looking for an experienced Cyber Security GRC professional to lead certification programs and drive ISO27001:2022 and SOC 2 Type 2 compliance across our global teams.

You will mentor security analysts, prepare investigations and audit documentation, and coordinate responses to customer security questionnaires, leveraging Jira, Confluence and OneTrust to maintain rigorous governance.

Qualifications

• 3–5 years of experience in a Cyber Security GRC role.
• Experience leading ISO27001 and SOC 2 Type 2 certification programs, including audits.
• Ability to interpret legal/regulatory documentation and coordinate with legal counsel.
• Strong research, analytical and organisational skills with attention to detail.
• Intermediate to advanced English (B2 or higher) for international communications.
• Comfortable in a fast-paced, global environment and collaborating across regions.
• Experience with compliance, monitoring, or workflow tools (Jira, Confluence, Vanta, OneTrust).
• Familiarity with HIPAA, NIS2, DORA, APRA CPS 230/234.

Responsibilities

• Lead ISO27001:2022 and SOC 2 Type 2 certification activities.
• Mentor cyber security analysts and provide support as required.
• Prepare reports and documentation for security investigations, regulatory compliance, and internal processes.
• Assist with customer security assurance responses to questionnaires.

Skills

Cyber Security

GRC

Audit coordination

Regulatory knowledge

English proficiency

Tools

Jira

Confluence

Vanta

OneTrust

Job description

About MegaportWe’re not your typical tech company – and we don’t want to be. Megaport is the global leader in Network as a Service (NaaS), and has transformed the way businesses connect to the cloud, data centers, and each other. We’re publicly listed on the Australian Stock Exchange and partnered with the biggest names in tech like Amazon, Microsoft, Google, Oracle, IBM, and more. Headquartered in Brisbane with a crew of over 600 people spread across Asia-Pacific, Europe, and the Americas, our employees enjoy an environment that is collaborative, supportive, and (actually) fun. Our Team CultureWe’re a team of problem solvers, pixel pushers, code slingers, and cloud fanatics. Culture is more than a poster on the wall here – collaboration beats hierarchy, curiosity fuels our growth, and everyone’s voice matters. We take our work seriously, but not ourselves. We work across time zones to execute on our global vision, trust each other to get things done, and never compromise our values for commercial gain. Most importantly, we place our customers at the center of everything we do. We’re committed to increasing representation in the tech industry and welcome applicants from all backgrounds. Don’t meet every requirement? That’s okay.
Our Vibe

• Integrity >everything
• Small teams, huge outcomes
• We celebrate curiosity, collaboration, and a can-do attitude
• If you thrive in a fast, globally distributed environment (and appreciate a good meme), you’ll feel right at home.

What You’ll Be Doing

• Lead the security compliance certification activities such as ISO27001:2022 and SOC 2 Type 2.
• Mentor cyber security analysts in the team and provide support where required.
• Prepare reports and documentation to support cyber security and privacy incident investigations, regulatory compliance activities, and internal compliance processes.
• Assist with customer security assurance activities such as responding to customer security and privacy questionnaires.

What You Bring

• 3-5 years of experience in a Cyber Security GRC role.
• Experience with leading ISO27001 and SOC 2 Type 2 certification programs, including supporting internal and external audit activities.
• Ability to interpret legal or regulatory documentation and coordinate responses with internal teams and legal counsel.
• Strong research, analytical, and organisational skills, with excellent attention to detail.
• Intermediate to advanced English proficiency (B2 or higher) for handling international notifications and communications.
• Comfortable working in a fast-paced, global environment, collaborating across teams and regions.
• Experience with compliance, monitoring, or workflow tools (e.g., Jira, Confluence, Vanta or OneTrust.
• Familiarity with global regulations and standards such as HIPAA, NIS2, DORA, and APRA CPS 230/234.