Senior IT Risk & Security Auditor - Brisbane

Decipher Bureau; City of Brisbane; Hybrid; AUD 90,000 - 130,000; Full time

Job summary

Decipher Bureau is seeking a Senior Specialist in Information System Risk to join our Brisbane team. The role focuses on IT audit, information security, technology risk and assurance across client engagements, from scoping through to reporting and presentation.

You will lead and contribute to audits, assess controls, identify gaps and present evidence-based recommendations to clients, with a strong emphasis on practical risk mitigation and stakeholder dialogue.

Qualifications

• 2+ years' experience in IT audit, information security, cybersecurity, GRC or technology risk
• Relevant tertiary degree in Information Technology, Cyber Security, Business, Commerce or related field
• CISA or CISSP certification is highly regarded
• Australian working rights are required
• CPA Australia or CAANZ membership, or progress towards membership, is advantageous

Responsibilities

• Lead IT audit, information security and technology risk engagements
• Coordinate the delivery and project management of lower-risk engagements
• Contribute to medium and high-risk audits and assurance engagements
• Assess information security controls, practices and processes
• Identify control gaps, risks and opportunities for improvement
• Prepare high-quality audit reports, working papers and presentations
• Develop clear, evidence-based recommendations
• Present and discuss findings directly with clients

Skills

IT audit

Information security

Cybersecurity

GRC

Technology risk

Client engagement

Report writing

Stakeholder management

Education

Information Technology / Cyber Security / Business / Commerce or related field

Tools

Active Directory

Microsoft Entra ID

Databases

ERP systems

Job description

Decipher Bureau is seeking a Senior Specialist in Information System Risk to join our Brisbane team. The role focuses on IT audit, information security, technology risk and assurance across client engagements, from scoping through to reporting and presentation.

You will lead and contribute to audits, assess controls, identify gaps and present evidence-based recommendations to clients, with a strong emphasis on practical risk mitigation and stakeholder dialogue.