Senior Security Risk & Compliance Analyst

Cubic Transportation Systems; Sydney; On-site; AUD 150,000 - 210,000; Full time

Job summary

Cubic Transportation Systems (CTS) is seeking a skilled IT security compliance professional to support production environments. You will lead PCI-DSS, ISO 27001, and SOC compliance efforts, coordinate audits with internal and external teams, and drive remediation plans across on-site Sydney operations.

The role requires deep knowledge of risk assessment, policy, and stakeholder engagement in a cross-functional IT setting, with a focus on payment card environments and cloud security

Qualifications

• Strong written and oral communication skills in English.
• Familiarity with PCI DSS 4, ISO 27001, and SOC I/II.
• Expert level experience collaborating with stakeholders and solution providers.
• Experience across IT security/compliance in payment card environments.
• Ability to work in cross-functional, matrixed IT organization.
• Translate audits into practical remediation plans.

Responsibilities

• Perform as the recognized Subject Matter Expert on Security Risk Assessment methodology, policy, strategy and processes.
• Facilitate security audit operations, including scheduling, vendor coordination, program, and stakeholder coordination.
• Coordinate with Internal/External Auditors and IT teams to complete periodic audits; address follow up procedures.
• Lead the design and control reviews and assessments to support continuous compliance.
• Manage security review processes for all solutions to ensure PCI-DSS, ISO 27001, SOC 1 & SOC 2 compliance.
• Identify and report significant information security risks across applications, development, networking, data centers, cloud, and vendors.
• Capture compliance gaps and remediation plans in the OneTrust GRC system.

Skills

Security Risk Assessment

Audit Coordination

PCI-DSS

ISO 27001

SOC 1 & SOC 2

OneTrust GRC

Microsoft Office

Stakeholder Management

Education

University degree in Computer Science / Engineering

IT security or payments domain experience

Tools

OneTrust GRC

Microsoft Office

Job description

Cubic Transportation Systems (CTS) is seeking a skilled IT security compliance professional to support production environments. You will lead PCI-DSS, ISO 27001, and SOC compliance efforts, coordinate audits with internal and external teams, and drive remediation plans across on-site Sydney operations.

The role requires deep knowledge of risk assessment, policy, and stakeholder engagement in a cross-functional IT setting, with a focus on payment card environments and cloud security