Senior IT Cyber Governance, Risk and Compliance Analyst

Reserve Bank of Australia; Sydney; Hybrid; AUD 100,000 - 140,000; Full time

Benefits offered by this job

Hybrid work environment

Job summary

Reserve Bank of Australia invites a Senior Cyber GRC Analyst to proactively identify, assess and manage cybersecurity risks while ensuring regulatory compliance and industry standards.

You will partner with Line 1 business units and Risk Management to deliver accurate cyber risk reporting under the 3LoA model, mapping controls to Top 37, E8 and NIST CSF, and coordinating audits across the Bank.

Qualifications

• At least 3 years of experience in a dedicated cybersecurity role with focus on risk and compliance.
• Experience in cyber control testing and automated control assurance techniques.
• Strong understanding of enterprise risk management frameworks and regulatory standards.

Responsibilities

• Partner with business units and Risk Management to strengthen cyber risk management.
• Identify and anticipate cyber risk and compliance challenges aligned with objectives.
• Conduct third-party cyber risk assessments and provide assurance based on vendor profiles.
• Maintain cyber risk & control library and map to Top 37, Essential Eight, and NIST CSF.
• Aggregate system-level risks for departmental/enterprise reporting.
• Support internal and external audits (e.g., SWIFT CSP, ISO 27001, CPS 234).
• Coordinate and execute cyber audit activities across the Bank.
• Drive cyber operational resilience through BIA and BCP reviews and risk assurance.
• Maintain and report risk scenarios, Bowtie analyses, and risk profiles.
• Apply deep understanding of risk and compliance frameworks, preferably in central banking or financial services.
• Lead cyber control testing activities in line with the framework.
• Develop and embed automated cyber control assurance.

Skills

Cyber risk management

Risk & compliance

Stakeholder engagement

Audit coordination

Control testing

Third-party risk

Business continuity

Regulatory standards

Job description

• Hybrid work environment

• Permanent Role with the Reserve Bank of Australia

• Play an important part shaping the future of our iconic Australian institution.

About the Role

The Reserve Bank of Australia (RBA) is seeking a Senior Cyber GRC Analyst to join our Cyber Risk and Compliance on a permanent basis. This is a unique opportunity to contribute to the Bank’s mission by proactively identifying, assessing, and managing cybersecurity risks, ensuring compliance with regulatory requirements and industry standards.

In this role, you will partner with Line 1 business units and collaborate with Risk Management (Line 2) to deliver accurate and timely cyber risk reporting. You’ll help maintain alignment with the Bank’s enterprise risk management framework under the ‘Three Lines of Accountability’ (3LoA) model and ensure compliance with standards such as CPS 234, ISO 27001, & the ACSC Top 37.

Reporting to the Manager, Cyber Risk and Compliance, you will be part of a multi-disciplinary IT Cyber function and responsible for:

• Partnering with business units and Line 2 stakeholders to strengthen cyber risk management practices in line with the Bank’s 3LoA model.

• Identifying and anticipating cyber risk and compliance challenges aligned with strategic and operational objectives.

• Conducting third-party cyber risk assessments and providing ongoing assurance based on vendor risk profiles.

• Maintaining and updating the cyber risk & control library and taxonomy, including mapping to frameworks such as Top 37, Essential Eight (E8), & NIST CSF.

• Aggregating system-level risks and issues for departmental and enterprise reporting.

• Supporting internal and external audits (e.g., SWIFT CSP, ISO 27001, CPS 234).

• Coordinating and executing cyber audit activities across the Bank.

• Driving cyber operational resilience by supporting Business Impact Analysis and Business Continuity Planning reviews, and cyber operational risk assurance activities.

• Maintaining and reporting on risk scenarios, Bowtie analyses, and risk profiles for both Line 1 and Line 2 departments.

• Applying deep understanding of risk and compliance frameworks, preferably within central banking or financial services.

• Leading and coordinating cyber control testing activities in line with the Risk and Compliance Management Framework.

• Developing and embedding an automated approach to cyber control assurance, improving efficiency and effectiveness.

The successful candidate will also be required to undertake an AGSVA ‘Baseline’ security clearance.

About You

You are passionate about cybersecurity, risk, and compliance, and enjoy sharing that passion with others. You bring a collaborative mindset and a strong ability to influence stakeholders across the RBA. To be successful in this critical role you will possess the following skills:

• At least 3 years of experience in a dedicated cybersecurity role, with a focus on risk and compliance.

• Extensive experience in cyber control testing, including the design and implementation of automated control assurance techniques.

• Strong understanding of enterprise risk management frameworks, 3LoA model and regulatory standards.

• Proven ability to engage and influence stakeholders across Lines 1 and 2.

• Familiarity with cyber control frameworks and enterprise risk reporting tools.

• Experience with Business Continuity Management and cyber risk assurance in complex operational environments.

• Experience with third-party risk management and audit coordination.

Highly Desirable

• Experience in cyber risk and compliance roles within financial services or central banking.

Be More

Working for an organisation that truly makes a difference to the people of Australia, we can offer development and career opportunities in a collaborative environment that supports your growth, wellbeing and promotes flexibility. Your individual growth and success drives the RBA forward as an organisation. Be more means you can do more, for yourself and for Australia.

Why RBA?

The RBA makes an important contribution to the Australian economy through the pursuit of national economic policy objectives and associated activities in financial markets and banking. We also issue Australia’s banknotes and operate infrastructure critical to the payments system, all of which contribute to the welfare of the Australian people. Made up of specialists across a wide range of fields, our people, values, and culture play a critical role in achieving our objectives.

Our people conduct themselves with a high degree of integrity, while striving for excellence in the work they perform and the outcomes they achieve. We encourage intelligent inquiry, and we treat one another with respect while promoting the public interest through our efforts. We know it is the growth and success of our people that drives the RBA forward.

The Reserve Bank of Australia is committed to equity, diversity and inclusion through key initiatives. We welcome and encourage applicants from diverse backgrounds to apply, including Aboriginal and Torres Strait Islander peoples, culturally and linguistically diverse.

Application Close :

September 17, 2026