We are seeking an experiencedCyber Security Analystto support a major cyber security uplift program within a Queensland Government environment.
This role focuses oncyber security governance, risk, compliance and assurance, with a strong hands-on component across security assessments, control maturity, vulnerability remediation, risk management and cyber security reporting.
You'll work closely with business stakeholders, ICT service providers, technical teams and senior management to strengthen security controls, improve cyber maturity and reduce cyber risk.
Key Responsibilities
Support delivery ofcyber security upliftinitiatives and control improvements.
Maintain cyber security control libraries and assesscontrol maturity and effectiveness.
Conductsecurity assessments, maturity reviews and compliance reviews.
Support internal and externalcyber security audits and assurance activities.
Coordinatevulnerability remediationwith technical teams and service providers.
Support cyber securityrisk assessments, treatment plans and risk registers.
Developcyber security metrics, dashboards and executive reporting.
Analyse security data to identify risks, trends and improvement priorities.
Provide practical cyber security advice to business and project stakeholders.
Facilitate security workshops, interviews and stakeholder discussions.
About You
You will have:
Demonstrated experience deliveringcyber security upliftactivities.
Strong experience acrossGRC, risk, compliance and security assurance.
Experience coordinatingvulnerability remediation.
Experience conductingsecurity assessments and maturity reviews.




Strong reporting and analytical skills, includingcyber security dashboards and metrics.
Experience working ingovernment, critical infrastructure or another regulated workplace.
Excellent stakeholder engagement and communication skills.
To be considered for this role, the following skills and experince is required:
ISO/IEC *****:****
NIST Cybersecurity Framework 2.0
Queensland Government IS18
Cyber security control frameworks and maturity models
Vulnerability management
Security assessment and assurance methodologies
Cyber security risk management
Microsoft security technologies and services
Cyber security metrics and reporting
Paxus values diversity and welcomes applications from Indigenous Australians, people from diverse cultural and linguistic backgrounds, and people living with a disability.
The recruitment and selection process varies, and some roles may include completion of pre-employment assessments, in-person or online interviews, psychometric testing, written assessments, scenario-based tasks, presentations, and pre-employment checks such as medical (including drug and alcohol), criminal history, or financial.
If you require an adjustment to any part of the recruitment process, including the application form or assessments completed in an alternate format, please contact me using the above details.
As part of our ongoing commitment to accessibility, we are also in the process of updating our website to reach full conformance with WCAG 2.2 AA.
If you experience any difficulties, please contact me on the above details.
#J-*****-Ljbffr

📌 Cyber Grc Analyst (Queensland)
🏢 Paxus
📍 Queensland