Cyber Security Analyst – GRC & Assurance

Brisbane | Contract to June 2027 with possibility of extension

We’re currently partnering with a well-established organisation looking for an experienced Cyber Security Analyst to support a broad cyber security uplift program.

This is a great opportunity for someone with a strong background across governance, risk, compliance and assurance who enjoys working across both business and technical teams to improve security controls, support assessments and drive remediation activities.

The focus is on helping the organisation strengthen its cyber security posture through practical governance, assurance, risk and control activities.

The role

You’ll work closely with business stakeholders, technology teams, service providers and senior leaders to support cyber security uplift initiatives, assess control effectiveness and help drive remediation and continuous improvement.

Key responsibilities will include:

• Supporting cyber security uplift activities across the organisation
• Undertaking cyber security reviews, control assessments and maturity assessments
• Assessing compliance against relevant security policies, standards and frameworks
• Supporting internal and external cyber security audits and assurance activities
• Coordinating vulnerability remediation with technical teams and service providers
• Tracking security risks, issues, actions and treatment plans
• Maintaining and assessing cyber security controls
• Developing practical cyber security metrics, dashboards and reporting
• Analysing security data to identify risks, trends and improvement opportunities
• Preparing clear executive and governance reporting
• Providing practical cyber security advice to business and technology stakeholders
• Facilitating workshops, interviews and security discussions

About you

We’re looking for someone with demonstrated experience across cyber security GRC, assurance and uplift, ideally within government or another regulated environment.

You’ll bring experience in areas such as:

• Cyber security governance, risk, compliance and assurance
• Security assessments and maturity reviews
• Cyber security control frameworks and maturity models
• Vulnerability management and remediation coordination
• Cyber risk assessments and treatment planning
• Security control testing and effectiveness assessments
• Cyber security reporting, dashboards and metrics
• Working with technical teams, service providers and senior stakeholders

Knowledge of the following will be highly regarded:

• ISO/IEC 27001:2022
• NIST Cyber Security Framework 2.0
• Queensland Government IS18
• Security assurance and assessment methodologies
• Microsoft security technologies and services
•