Vulnerability Management Cyber Security Analyst

Snowy Hydro; Sydney; On-site; AUD 110,000 - 140,000; Full time

Job summary

Snowy Hydro is seeking a mid-level operational Cyber Security Analyst to protect information systems and data. The role focuses on vulnerability management, assurance, and risk management across IT and OT environments.

You will lead remediation activities, support security audits, and collaborate with project teams to embed cybersecurity requirements across initiatives. Based in Sydney or Melbourne with hands-on security responsibilities.

Qualifications

• Must have hands-on vulnerability management experience and drive remediation across tech teams.
• Experience with audits and security frameworks (AESCSF, ISO/IEC 27001).
• Ability to communicate effectively with stakeholders at all levels.

Responsibilities

• End-to-End Vulnerability Management (60% Focus): Lead and execute the full vulnerability management lifecycle, encompassing discovery, risk assessment, prioritisation, and remediation across technology teams and the business.
• Compliance & Risk Assessments: Support ongoing internal and external security audits, ensuring alignment and compliance against AESCSF, ISO 27001 and SCI.
• Project Security Alignment: Collaborate with project teams to establish cybersecurity requirements and ensure delivery of controls.
• Cyber Security Assurance: Conduct security assessments and assurance activities across systems, applications, and third-party vendors.
• Risk Assessments: Conduct security risk assessments across systems, processes, and third parties; define treatment plans.

Skills

Vulnerability management

Security governance

Communication

Framework familiarity

Security risk assessment

Tools

Tenable

Qualys

EDR

SIEM

PAM

SASE/Netskope

Firewalls

IDAM

Job description

Snowy Hydro is seeking a mid-level operational Cyber Security Analyst to protect information systems and data. The role focuses on vulnerability management, assurance, and risk management across IT and OT environments.

You will lead remediation activities, support security audits, and collaborate with project teams to embed cybersecurity requirements across initiatives. Based in Sydney or Melbourne with hands-on security responsibilities.