JOB   DETAILS

THE ROLE

Our client is  seeking a practical, hands-on Cyber Security Analyst who has real-world experience securing enterprise environments and delivering cybersecurity outcomes. This is not a governance-only or policy-writing role. We are looking for someone who has personally assessed systems, identified risks, implemented controls, worked with vendors, and driven remediation activities. The successful candidate will support the Cybersecurity Uplift Program, improve alignment with ISO 27001:2022, increase Essential Eight maturity, and bring business-managed and Shadow IT platforms into formal security governance.

This role suits someone who enjoys rolling up their sleeves and getting things done. We are not looking for a compliance-only resource. We want someone who can assess, advise, implement, and deliver tangible security outcomes for the organisation.

RESPONSIBILITIES

• Conduct security assessments of business applications, cloud platforms, SaaS solutions, and third-party suppliers.
• Identify security risks, control gaps, and remediation actions across technology platforms.
• Establish, maintain, and test cyber incident response procedures through tabletop exercises, simulations, and post-incident reviews to improve organisational preparedness and response capability.
• Lead the onboarding of Shadow IT and business-managed systems into formal security governance and support processes.
• Review new technology solutions and integrations to ensure compliance with organisational security requirements.
• Support the maintenance and continual improvement of the Information Security Management System (ISMS).
• Gather and maintain evidence required for ISO 27001:2022 audits and compliance activities.
• Support Essential Eight uplift initiatives and remediation activities.
• Contribute to security awareness and education programs.
• Prepare risk assessments, security reports, and recommendations for management.

ABOUT YOU

Essential Skills and Experience

• Minimum 5 years’ experience in a Cyber Security Analyst, Security Consultant, or similar hands-on security role.
• Demonstrated experience conducting security assessments and risk reviews.
• Proven experience implementing security improvements, not just producing reports and recommendations.
• Strong knowledge of ISO/IEC 27001:2022 and practical experience implementing and maintaining security controls.
• Experience working with the Australian Cyber Security Centre (ACSC) Essential Eight framework.
• Experience assessing and onboarding Shadow IT, SaaS platforms, and business-managed applications into formal governance processes.
• Experience conducting supplier security assessments and third-party risk reviews.
• Experience supporting audit and compliance activities.
• Strong stakeholder engagement and communication skills.
• Ability to work independently and drive outcomes with minimal supervision.

Desirable Experience

• Experience within a not-for-profit, healthcare, or regulated environment.
• Experience with Microsoft Defender, Microsoft Sentinel, vulnerability management platforms, and security monitoring tools.
• Experience reviewing Salesforce, cloud-hosted platforms, integrations, and externally managed applications.
• Knowledge of privacy legislation, data protection requirements, and supplier assurance frameworks.
• Experience supporting ISO 27001 audits or certification activities.

Personal Attributes

• Hands-on and action-oriented.
• Comfortable challenging vendors and stakeholders when security risks are identified.
• Strong problem-solving and analytical skills.
• Pragmatic approach to balancing risk and business requirements.
• Curious, proactive, and continuously looking for improvement opportunities.
• Able to build strong working relationships across the organisation.

WHAT SUCCESS LOOKS LIKE

Within the 12 month contract, the successful candidate will:

• Complete security assessments across key business and technology platforms.
• Establish and test cyber incident response procedures through exercises and simulations.
• Successfully onboard Shadow IT platforms into formal governance and support processes.
• Support and improve compliance with ISO 27001:2022 requirements.
• Improve Essential Eight maturity across the organisation.
• Strengthen supplier security assurance processes.
• Reduce identified cybersecurity risks through practical remediation and control improvements.
• Contribute to a stronger, more resilient security posture across the organisation.

Are you interested in this position?

Apply by clicking on the “Apply Now” button below!

#DesignFintech #GlobalDesigners

#FintechInnovation #CreativeJobs

#DesignHub

#Tech Meets Design

#DesignerNetwork

#Myausjob