Benefits

Hybrid policy: 3 days in office, 2 days WFH

Relaxed team environment

Twice-yearly team events

Small team with room to make an impact with clear progression

Skills (Requirements)

• 4+ years' experience in cyber security GRC / assurance / security analysis
• Practical experience maintaining an ISMS aligned to ISO27001 (documentation, artefacts, evidence)
• Proven audit coordination and control testing experience (internal and external)
• Strong experience with risk assessments, risk registers and remediation tracking
• Experience with third-party / vendor security assessments and evidence review
• Strong understanding of Essential Eight and general security controls (IAM, logging, endpoint, secure configuration)
• Strong written communication for governance reporting and stakeholder engagement
• Relevant qualifications/certs (ISO27001 Lead Auditor, CISA/CISM) highly regarded

Role Responsibilities

• Maintain and continuously improve the ISO27001 aligned ISMS (policies, standards, procedures, registers)
• Coordinate internal and external audits, ensuring evidence is accurate and audit-ready
• Conduct control testing, track remediation actions and validate closure evidence
• Perform cyber risk assessments and maintain the cyber risk register and treatment plans
• Deliver third-party risk assessments, document findings and track supplier risk actions
• Lead security awareness initiatives (campaigns, training, phishing simulations)
• Produce governance reporting, dashboards and metrics for management and Board audiences
• Maintain well-structured documentation repositories (e.g., Confluence/SharePoint/Jira) and create templates/checklists as needed

Senior Cyber Security Analyst - GRC | Brisbane CBD | Hybrid Working | $150,000 + super | Permanent

Desired Skills and Experience

* 4+ years' experience in cyber security GRC / assurance / security analysis

* Practical experience maintaining an ISMS aligned to ISO27001 (documentation, artefacts, evidence)

* Proven audit coordination and control testing experience (internal and external)

* Strong experience with risk assessments, risk registers and remediation tracking

* Experience with third-party / vendor security assessments and evidence review

* Strong understanding of Essential Eight and general security controls (IAM, logging, endpoint, secure configuration)

* Strong written communication for governance reporting and stakeholder engagement

* Relevant qualifications/certs (ISO27001 Lead Auditor, CISA/CISM) highly regarded

… more

Set alert for similar jobs

Senior Analyst, Brisbane, Queensland, Australia

Off

Job search faster with Premium

Access company insights like strategic priorities, headcount trends, and more

• 
• 
• 
• Millions of members use Premium