Cyber GRC Analyst

We are seeking an experienced Cyber Security Analyst to support a major cyber security uplift program within a Queensland Government environment.

This role focuses on cyber security governance, risk, compliance and assurance, with a strong hands-on component across security assessments, control maturity, vulnerability remediation, risk management and cyber security reporting.

You’ll work closely with business stakeholders, ICT service providers, technical teams and senior management to strengthen security controls, improve cyber maturity and reduce cyber risk.

Key Responsibilities

• Support delivery of cyber security uplift initiatives and control improvements.
• Maintain cyber security control libraries and assess control maturity and effectiveness.
• Conduct security assessments, maturity reviews and compliance reviews.
• Support internal and external cyber security audits and assurance activities.
• Coordinate vulnerability remediation with technical teams and service providers.
• Support cyber security risk assessments, treatment plans and risk registers.
• Develop cyber security metrics, dashboards and executive reporting.
• Analyse security data to identify risks, trends and improvement priorities.
• Provide practical cyber security advice to business and project stakeholders.
• Facilitate security workshops, interviews and stakeholder discussions.

About You

You will have:

• Demonstrated experience delivering cyber security uplift activities.
• Strong experience across GRC, risk, compliance and security assurance.
• Experience coordinating vulnerability remediation.
• Experience conducting security assessments and maturity reviews.
• Strong reporting and analytical skills, including cyber security dashboards and metrics.
• Experience working in government, critical infrastructure or another regulated environment.
• Excellent stakeholder engagement and communication skills.
  
  
  

To be considered for this role, the following skills and experince is required:

• ISO/IEC 27001:2022
• NIST Cybersecurity Framework 2.0
• Queensland Government IS18
• Cyber security control frameworks and maturity models
• Vulnerability management
• Security assessment and assurance methodologies
• Cyber security risk management
• Microsoft security technologies and services
• Cyber security metrics and reporting

To be considered for the role click the 'apply' button or for more information about this and other opportunities please contact Anita Cunningham on 07 33395626 or email: acunningham@paxus.com.au

Paxus values diversity and welcomes applications from Indigenous Australians, people from diverse cultural and linguistic backgrounds, and people living with a disability. The recruitment and selection process varies, and some roles may include completion of pre-employment assessments, in-person or online interviews, psychometric testing, written assessments, scenario-based tasks, presentations, and pre-employment checks such as medical (including drug and alcohol), criminal history, or financial. If you require an adjustment to any part of the recruitment process, including the application form or assessments completed in an alternate format, please contact me using the above details. As part of our ongoing commitment to accessibility, we are also in the process of updating our website to reach full conformance with WCAG 2.2 AA. If you experience any difficulties, please contact me on the above details.