Senior Security Analyst (GRC)

Davidson; Melbourne; Hybrid; AUD 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid work options

Office in Melbourne CBD

Job summary

SEC Victoria is seeking a seasoned cyber security governance, risk and compliance professional to join our technology risk team. You will partner with stakeholders across the business to ensure ISO/IEC 27001 aligned controls, risk assessments and remediation activities align with regulatory obligations.

You’ll lead technology risk governance and advisory, translating complex security issues into clear business decisions for leaders.

Qualifications

• Expertise in cyber security governance, risk and compliance.
• Experience with ISO/IEC 27001 aligned controls and risk assessments.
• Ability to translate security concepts into business risks and actions.

Responsibilities

• Strengthen cyber resilience and support audits across the organisation.
• Lead technology risk governance and advisory, reporting to leaders.
• Drive security engagement, awareness and change enablement across projects.

Skills

Cyber security

Risk management

Compliance

Tools

GRC platforms

Controls library

Job description

Davidson is the proud recruitment partner of SEC Victoria as they accelerate Victoria's renewable energy transition.

Do work that makes a difference

Join an organisation who's making a real difference to Victoria's energy future. SEC's passionate people are working to support the transition to renewable energy and delivering affordable, reliable, renewable energy for all Victorians.

SEC offers hybrid working with offices in Melbourne's CBD and Morwell.

What your day could look like

Every day will look a little different as you partner with teams across Technology & Data and the broader SEC to strengthen cyber resilience and support critical business initiatives. You'll take ownership of security controls & compliance assurance, ensuring security controls remain effective, aligned to ISO/IEC 27001 and key regulatory obligations, while working closely with control owners to assess maturity, address gaps and support audits. At the same time, you'll lead technology risk governance & advisory, facilitating risk discussions, maintaining the technology risk landscape and translating complex security issues into clear business decisions for leaders and stakeholders.

You'll also play a key role in security engagement, awareness & change enablement, acting as a trusted advisor across projects and transformation initiatives. Whether supporting new technology capabilities, driving security awareness across the workforce or helping teams implement practical risk treatments, you'll balance governance with commercial outcomes. Success in this role comes from building strong relationships, influencing decision-making and ensuring security remains embedded in the way SEC delivers a reliable, affordable and sustainable energy future for Victoria.

What you need to be successful

You'll bring deep experience in cyber security governance, risk and compliance, with the ability to balance strong security outcomes with practical business needs. Comfortable operating in a complex stakeholder environment, you can translate technical security concepts into meaningful business risks and actions, build trusted relationships across teams, and take ownership from identifying an issue through to implementing a sustainable solution. Your experience working with security controls frameworks, technology risk management and assurance activities will enable you confidently influence decision-making and strengthen SEC's cyber security posture.

• Demonstrated expertise in cyber security governance, risk and compliance, including hands‑on experience with ISO/IEC 27001‑aligned controls frameworks, risk assessments, assurance activities and remediation management.
• Proven ability to manage technology or cyber risks throughout their lifecycle, leveraging GRC platforms, facilitating stakeholder discussions and providing clear, actionable reporting to business and technology leaders.
• Experience building and/or administering a controls library, including conducting control assessments, managing evidence, identifying gaps and driving remediation activities to improve security effectiveness and compliance outcomes.

What is it like to work at SEC?

Join a team of passionate, purpose-driven people who care about the work they do and the people they work with. At SEC, our collaborative and inclusive culture means you'll enjoy working beside people who celebrate each other's achievements. You'll also do meaningful work, build great relationships, and help shape Victoria's energy future.

SEC offers flexible working options designed to support individual circumstances. To find more about our purpose and what it's like to work at SEC, visit SEC on LinkedIn or their website: SEC - Victoria

We strongly encourage applications from Aboriginal and Torres Strait Islander people. We are also deeply committed to building an inclusive workplace that embraces diversity and people with disability, people from the LGBTIQ community, and people from culturally diverse backgrounds. SEC strives to create a respectful and collaborative workplace culture that allows all employees to thrive.

Applicants must be an Australian citizen, permanent resident or hold a valid work permit to be eligible to apply.

Other important information:

• You must be an Australian citizen, permanent resident or hold a valid work permit to be eligible to apply.
• To receive this information in an accessible format (such as large print or audio) or if you require any reasonable adjustments during the recruitment process, please reach out to [e-mail]