Job Description

Cyber Security Analyst

n

Melbourne CBD - Hybrid - 3-4 days on-site
n Full time

n

We're looking for a Cyber Security Analyst to help keep our customers and operations safe, resilient and ready for what's next.

n

This is a hands-on engineering role for someone who's as comfortable talking to a control-systems engineer on a plant floor as they are configuring a firewall or briefing leadership on good Cyber Security governance, risk and compliance.

n

You will help protect operations that are genuinely critical - supporting the safe, reliable running of our business - while building your career across both IT and OT security.

n

What you'll do

n

Secure the business, end to end

n

n
- Deliver cyber security engineering services that protect the business and support its objectives.
n
- Keep engineering activity aligned to business goals, compliance obligations and risk appetite.
n
- Act as a trusted advisor on complex security issues spanning people, process and technology - across both IT and OT environments.
n

n

Design, build and run our defences

n

n
- Implement and integrate security controls across IT, OT and IoT systems.
n
- Own the lifecycle of key security technologies - firewalls, SASE, EDR, IAM, encryption and more.
n
- Embed DevSecOps practices into development and deployment pipelines.
n
- Use automation to enforce secure configuration baselines and maintain compliance.
n

n

Manage risk and stay compliant

n

n
- Run risk assessments, vulnerability management and gap analyses.
n
- Align practices to frameworks including ASD Essential Eight, AESCSF, ISA/IEC 62443 and NIST.
n
- Support compliance with regulatory obligations for critical infrastructure and privacy.
n

n

Respond and build resilience

n

n
- Support incident response, business continuity and disaster recovery activities.
n
- Act as an Incident Handler within the Cyber Security Incident Response Team (CSIRT), including out-of-hours support during critical incidents.
n

n

Stay ahead of the threat

n

n




- Bring internal and external threat intelligence into design decisions, risk assessments and incident response planning.
n
- Drive automation and orchestration to speed up detection and response, and keep engineering practices current as threats and technology evolve.
n

n

What you'll bring

n

n
- Strong knowledge of cyber security principles, frameworks and practices - OT experience highly regarded.
n
- Hands-on experience with application whitelisting, SASE, firewalls, proxy, email filtering, anti-malware, DLP and cloud platforms.
n
- Familiarity with DevSecOps, automation and orchestration tooling.
n
- Experience with vulnerability management, web application and API security, Zero Trust, PAM, NDR, UEBA and network-based encryption.
n
- Proficiency with Microsoft (Azure, O365), Linux (Red Hat) and mobile platforms (iPhone and Android).
n
- Strong communication and stakeholder engagement skills, with the ability to explain risk clearly to technical and non-technical audiences alike.
n
- Sharp analytical and organisational skills.
n
- A track record of providing thought leadership or mentoring within a cyber security team.
n

n

Qualifications & experience

n

n
- A degree in Cyber Security, IT, Engineering or a related field - or equivalent practical experience.
n
- Industry certifications highly regarded (e.g. CISSP, CISM, GICSP, SANS/GIAC).
n
- At least 4 years' experience in cyber security roles, ideally with exposure to OT environments.
n
- Demonstrated experience working with AESCSF, ISA/IEC 62443, ASD Essential Eight or NIST frameworks.
n

n

Why join us

n

You'll join a business where cyber security genuinely matters to safety and operational continuity, not just compliance. Based in Melbourne CBD with a hybrid working rhythm of 3-4 days on-site, you'll work closely with engineering, operations and leadership teams, with real scope to shape how our Cyber Safety Program evolves across both our IT and OT landscape.

n

Candidates must be eligible to work in Australia and able and willing to work on-site for 3-4 days per week (initially for 4 days each week)

n

#J-18808-Ljbffr

📌 Cyber Security Analyst (Victoria)
🏢 Operandi Consulting
📍 Victoria