Job Description
Our client, a well established financial services organisation, is continuing its cyber security and operational resilience uplift program, aligned to APRA CPS 230 and CPS 234, and benchmarked against NIST and ISO/IEC *****. As the business moves through third-party risk remediation and control maturity assessment, the team needs additional hands-on cyber GRC capability to maintain momentum.
n
This is a contract role suited to someone who has worked on a live regulatory or standards aligned cyber uplift program (CPS 230, CPS 234, NIST CSF, or ISO *****) and can hit the ground running.
n
What you'll be doing
n
n
Assessing and uplifting security controls against ISO/IEC ***** and the NIST CSF functions.
n
Supporting third-party/material service provider risk assessments, including security due diligence and control testing
n
Mapping critical operations and technology assets against control frameworks and identifying gaps
n
Conducting control testing, evidence collection, and maturity assessments ahead of internal and external audits
n
Contributing to ISMS documentation, policies, standards, risk treatment plans,



Statements of Applicability
n
Liaising with security engineering, risk, audit, and vendor management stakeholders to close out findings
n
n
What we're looking for
n
n
Proven experience in a cyber security GRC or information security role within financial services or other highly regulated industries.
n
Working knowledge of NIST CSF and ISO/IEC ***** (certification such as ISO ***** Lead
Auditor/Implementer
highly regarded)
n
Exposure to APRA CPS 230/CPS 234 or comparable regulatory frameworks
n
Comfortable running control assessments and translating technical findings into risk language for stakeholders
n
Contract background strongly preferred, available to start on short notice, based in Melbourne
n
n
What's on offer
n
n
Competitive day rate, negotiable based on experience
n
High-profile program with genuine extension/renewal potential
n
Exposure to a live, well-resourced cyber security transformation program benchmarked against leading frameworks
n

📌 Cyber Security Grc Analyst (Victoria)
🏢 FourQuarters Recruitment
📍 Victoria