Join a collaborative team that enables REA to manage cyber risk confidently while supporting secure business growthLead cyber security risk assessments across products,platformsand key initiativesPermanent role based in MelbourneWe're REAWith bold and ambitious goals, REA Group (about-us/about-rea-group/) is changing the way the world experiences property.
No matter where you're at on your property journey, we're here to help with every step - whether that's finding or financing your next home.Our people are the key to our success.
At the heart of everything we do, is a thriving culture centred around high performance and care.
We are purpose driven and collaborative, which drives innovation and our ability to make a real impact.
As such, we're proud to have been named one of Australia's Best Workplaces (about-us/#our-awards) four times since **** — including third place in **** — plus Best Workplace for Women in **** and Best Workplace in Technology in **** and ****.
These listings are testament to every person who helps make REA a great place to work.Where the team fits inThe Cyber Security GRC team provide advice and guidance across governance, risk and compliance, helping teams understand their security responsibilities, assess and treat risks, meet regulatory and contractual obligations, and embed secure-by-design practices into products, platforms and initiatives.
We also support security assessments, third-party due diligence, compliance programs, reporting and continuous improvement across REA.What the role is all aboutThe Senior Cyber GRC Analystis a key role within theGRC team andstrengthens REA's cyber resilience by leading theidentification, assessment and treatment of technology and information security risks, ensuring our products and platforms comply with relevant security, privacy and regulatory requirements, and enabling informed, risk-based decisions that protect our customers, people and brand while supporting sustainable business growth.Day to day of the jobDesign, implement and continuously improve cyber GRC frameworks, policies,



standards and supporting processes to fit REA's operating modelWork closely with other teams within REA Security to ensure they are effectivelyprioritisingthe building andoperationof cyber security controls, in line with theorganisation'srisk profileCoordinate and oversee control assurance activities (e.g.control testing, audits, attestations) and track remediationthroughclosure.Where possible, automate this assurance workEnsure that external compliance obligations and audits are appropriately prepared forand managedProvide specialist cyber GRC advice andcoaching totechnology and product teams to embed secure-by-design and risk-based thinkingMonitor changes in relevant cyber, privacy and technologystandards, contracts andregulations and translate these into practical requirements and guidance for REAPrepare and present concise, insightful risk and compliance reporting for technology leadership, riskcommittees, the board of directorsand other stakeholdersSupport third-party and supplier security assessments, including due diligence, ongoingassuranceand contract requirement reviewsContribute to incident preparedness activities (e.g.playbooks, table-top exercises) and support post-incident reviews from a GRC perspectiveChampion consistent use of cyber GRC tools and data, helping tomaintainaccuraterisk,controland issue registersDrive and support uplift initiatives that improve security culture,awarenessand ownership of cyber risk across theorganisationChampionacultureofinnovationand automationaround GRCWho we're looking forSignificant experiencein cyber security governance, risk and compliance, technologyriskor related fields,



ideally in digital or technology-ledorganisationsDemonstrated experience working closely with product and engineering teams to embed security and risk management into delivery practicesProficiencywith GRC and security tooling (e.g.risk registers, control libraries, workflow tools, vulnerability/issue management platforms) and using data to produce clear risk insightsSolid understanding of modern cloud and product engineering environments (e.g.AWS, CI/CD, microservices) and common security patterns,controlsand failure modesExperience coordinating or supporting security audits,certificationsor regulatory reviews (e.g.ISO*****, SOC 2,PCI-DSSor similar)Relevant tertiaryqualificationin Information Security, IT, Risk or related discipline, or equivalent practical experienceThe REA experienceThe physical, mental, emotional and financial health of our people is something we'll never stop caring about.
This is a place to learn and grow.Some of our Perks & Benefits include:A hybrid and flexible approach to workingFlexible leave options including, birthday leave and purchase additional leaveFlexible parental leave offering for primary and secondary carersOur Because We Care program offers employees volunteering leave, community grants, matched payroll giving and our Community Café donates 100% of revenue to charityHackdays so you can bring your big ideas to life Our commitment to Diversity, Equity, and InclusionWe are committed to providing a working environment that embraces and values diversity, equity and inclusion.
We believe teams with diverse ideas and experiences are more creative, more eu00f5ffective and fuel disruptive thinking.
If you've got the skills, dedication and enthusiasm to learn but don't necessarily meet every single point on the job description, please still get in touch.Join our Talent NeighbourhoodKeen to be part of REA but didn't find a perfect match with this chance?
Perhaps the timing isn't right?
You should join our Talent Neighbourhood!
(careers-talentneighbourhood)Req ID R*******
#J-*****-Ljbffr

📌 Senior Cyber Grc Analyst (Melbourne)
🏢 News
📍 Melbourne