Cyber Security Analyst – GRC & Assurance
Brisbane | Contract to June ****with possibility of extension
We're currently partnering with a well-established organisation looking for an experienced
Cyber Security Analyst
to support a broad cyber security uplift program.
This is a great opportunity for someone with a strong background across
governance, risk, compliance and assurance
who enjoys working across both business and technical teams to improve security controls, support assessments and drive remediation activities.
The focus is on helping the organisation strengthen its cyber security posture through practical governance, assurance, risk and control activities.
The role
You'll work closely with business stakeholders, technology teams, service providers and senior leaders to support cyber security uplift initiatives, assess control effectiveness and help drive remediation and continuous improvement.
Key responsibilities will include:
Supporting cyber security uplift activities across the organisation
Undertaking cyber security reviews, control assessments and maturity assessments
Assessing compliance against relevant security policies, standards and frameworks
Supporting internal and external cyber security audits and assurance activities
Coordinating vulnerability remediation with technical teams and service providers
Tracking security risks, issues, actions and treatment plans




Maintaining and assessing cyber security controls
Developing practical cyber security metrics, dashboards and reporting
Analysing security data to identify risks, trends and improvement opportunities
Preparing clear executive and governance reporting
Providing practical cyber security advice to business and technology stakeholders
Facilitating workshops, interviews and security discussions
About you
We're looking for someone with demonstrated experience across
cyber security GRC, assurance and uplift
, ideally within government or another regulated workplace.
You'll bring experience in areas such as:
Cyber security governance, risk, compliance and assurance
Security assessments and maturity reviews
Cyber security control frameworks and maturity models
Vulnerability management and remediation coordination
Cyber risk assessments and treatment planning
Security control testing and effectiveness assessments
Cyber security reporting, dashboards and metrics
Working with technical teams, service providers and senior stakeholders
Knowledge of the following will be highly regarded:
ISO/IEC *****:****
NIST Cyber Security Framework 2.0
Queensland Government
IS18
Security assurance and assessment methodologies
Microsoft security technologies and services
#J-*****-Ljbffr

📌 Cyber Security Analyst (Queensland)
🏢 Blackroc
📍 Queensland