Senior Cyber Security Analyst

NTT; Sydney; Hybrid; AUD 140,000 - 180,000; Full time

Benefits offered by this job

12-month contract

Sydney location

Hybrid working

Job summary

NTT Ltd. in Sydney seeks a Senior Cyber Security Analyst to join a large enterprise and strengthen cyber resilience.

This 12-month contract offers hybrid working, with a focus on vulnerability management, CIS compliance and risk-based remediation. You will work with security, infrastructure and risk teams to identify vulnerabilities, assess cyber risk and drive remediation, customizing CIS Benchmarks to organisational needs.

Qualifications

• Experience in vulnerability management within complex enterprise environments.
• Practical experience customizing CIS Benchmarks and compliance policies to organisational needs.
• Hands-on experience configuring CIS Benchmark compliance scans.

Responsibilities

• Conduct vulnerability assessments and security posture reviews.
• Configure CIS Benchmark scans and compliance checks.
• Customise CIS Benchmarks and compliance policies, including policy settings.
• Apply risk-based vulnerability prioritisation using exploitability, threat intelligence and asset criticality.
• Drive remediation with stakeholders to reduce cyber risk across technology teams.
• Produce reporting and metrics to support cyber risk management.

Skills

Vulnerability management

Security posture

CIS Benchmarks

Risk-based remediation

Stakeholder engagement

Tools

Tenable

Qualys

Rapid7

Job description

Senior Cyber Security Analyst | 12-Month Contract | Sydney

An exciting opportunity is available for an experienced Senior Cyber Security Analyst to join a large, complex enterprise environment and play a key role in strengthening cyber resilience.

This 12-month contract, based in Sydney with hybrid working, will focus on vulnerability management, security posture, CIS compliance and risk-based remediation.

The role

Working across cyber security, infrastructure, technology, architecture, risk and audit teams, you will identify vulnerabilities, assess cyber risk and help drive remediation across a complex technology environment.

A key focus of the position will be configuring and tailoring CIS Benchmarks and compliance policies to organisational requirements, rather than simply relying on out-of-the-box controls.

Key responsibilities

• Conduct vulnerability assessments, security posture reviews and compliance monitoring.
• Configure, run and interpret CIS Benchmark compliance scans within vulnerability management tooling.
• Customise CIS Benchmarks and compliance policies, including checks, exclusions, thresholds and policy settings.
• Apply risk-based vulnerability prioritisation using factors such as exploitability, threat intelligence and asset criticality.
• Work with technical and business stakeholders to drive vulnerability remediation and cyber risk reduction.
• Provide expertise around secure configuration, system hardening and security control effectiveness.
• Support compliance assessments, audits, control assurance and cyber risk activities.
• Produce reporting, metrics and insights to support cyber risk management and decision-making.
• Drive continuous improvement across vulnerability and security posture management.

About you

We're looking for an experienced cyber security professional who combines strong hands-on technical capability with excellent stakeholder engagement skills.

You will bring:

• Strong hands-on vulnerability management and remediation experience within complex enterprise environments.
• Practical experience using Tenable, Qualys, Rapid7 or an equivalent vulnerability management platform.
• Demonstrated experience customising CIS Benchmarks and compliance policies to meet organisational requirements.
• Hands-on experience configuring, running and interpreting CIS Benchmark compliance scans.
• Experience with risk-based vulnerability prioritisation, including exploitability, threat intelligence and asset criticality.
• Experience across security posture management, exposure management or attack surface management.
• Knowledge of secure configuration standards and system hardening.
• Experience supporting compliance assessments, audits, control assurance and cyber risk activities.
• Strong stakeholder engagement and communication skills, with the ability to influence technical and business teams.
• The ability to manage competing priorities, drive remediation outcomes and clearly communicate cyber risks and recommendations.

Highly regarded

• Knowledge of the Essential Eight, ASD ISM, NIST CSF and CIS Benchmarks.
• Experience with Microsoft Defender, Microsoft Sentinel or similar enterprise security platforms.
• Certifications such as CISSP, CISM, CRISC or GIAC.
• Tertiary qualifications in Cyber Security, IT, Computer Science or a related field.

What's on offer?

• 12-month contract
• Sydney location
• Hybrid working
• Opportunity to work within a large and complex enterprise technology environment
• Highly technical role with a strong focus on vulnerability, exposure and security posture management
• Opportunity to influence remediation and cyber risk reduction across multiple technology teams

If you have strong vulnerability management experience and enjoy combining hands-on security expertise with stakeholder engagement and risk-based remediation, we'd like to hear from you.

Join our growing global team and accelerate your career with us.

About us

NTT Ltd. is a leading global technology services company. Working with organizations around the world, we achieve business outcomes through intelligent technology solutions.For us, intelligent means data driven, connected, digital and secure. As a global ICT provider, we employ more than 40,000 people in a diverse and dynamic workplace that spans 57 countries, trading in 73 countries and delivering services in over 200 countries and regions

NTT is proud to be an equal opportunity employerwith a global culture that embraces diversity. We are committedto providing an environment free of unfair discrimination and harassment.We do not discriminate based on age, race, color, sex, religion, national origin, disability, pregnancy, marital status, sexual orientation, gender reassignment, veteran status, or other protected category.