- Employment Type: 2 Year Fixed Term Salaried Contract (3 positions available)
- Play an important part in shaping the future of Australia's central bank.

About the Team

The Vulnerability & Posture Management (VPM) team is part of the Reserve Bank's Cyber Security function and plays a critical role in strengthening the Bank's cyber resilience. The team is responsible for vulnerability management, security posture management, compliance assessment, secure configuration governance, exposure management, and the continual reduction of cyber risk across the Bank's technology environment.
Reporting to the Manager, Vulnerability & Posture Management, you will provide specialist vulnerability management and security hardening expertise as part of the team's Business as Usual (BAU) operations. These three two-year fixed-term positions are being recruited to backfill existing project roles and maintain the team's operational capability.
Working closely with Infrastructure, Cloud, Identity, Security Architecture, Cyber Operations, and Technology teams, you will support vulnerability remediation, security hardening, and compliance initiatives across the Bank. You will also contribute to improving vulnerability metrics, reporting, and automated compliance assessments, ensuring security controls remain effective, sustainable, and aligned with the Bank's risk appetite and regulatory obligations.

About the Role

As a Senior Cyber Security Analyst, you will play a key role within the Vulnerability & Posture Management (VPM) function, supporting Business as Usual operations that reduce cyber risk and strengthen organisational resilience.
Working closely with Cyber Security, Infrastructure, Cloud, Identity, End User Computing, and Technology teams,



you will drive vulnerability remediation, security hardening, and exposure reduction activities across enterprise technology environments. You will contribute to the assessment and prioritisation of vulnerabilities, coordinate operational responses, develop and enhance security metrics and reporting, and improve compliance with the Bank's security standards and risk appetite.
This role provides an opportunity to influence enterprise-wide cyber resilience outcomes while supporting the ongoing delivery and continuous improvement of the Bank's vulnerability management, security hardening, and compliance capabilities.

Key responsibilities include:

- Support the Bank's vulnerability management and security posture management capabilities, including vulnerability identification, assessment, prioritisation, remediation governance, and reporting.
- Coordinate responses to significant exposure events, including critical vulnerabilities, large-scale exploitation campaigns, and emerging threats.
- Contribute to the continuous improvement of vulnerability management, compliance assessment, and exposure management processes across enterprise technology environments.
- Provide subject matter expertise for vulnerability and posture management platforms, including Tenable and related security assessment technologies.




- Support and enhance vulnerability management workflows within ServiceNow Security Operations (SecOps), including vulnerability response, remediation tracking, exception management, reporting, and stakeholder engagement.
- Support remediation activities through risk-based prioritisation, considering exploitability, asset criticality, threat intelligence, and business impact.
- Collaborate closely with Infrastructure, Cloud, End User Services, Identity, Security Architecture, Service Owners, and Asset Owners to deliver effective cyber risk reduction outcomes.
- Partner with business, technology, and cyber security teams to promote secure configuration standards and vulnerability management practices across the enterprise.
- Develop, maintain, and enhance security standards, operational procedures, metrics, and reporting that support cyber risk management objectives.
- Support operational threat advisory and vulnerability response activities by assessing exposure, coordinating remediation efforts, and tracking risk reduction outcomes.
- Contribute to ongoing Business as Usual vulnerability remediation, security hardening, compliance uplift, and continuous improvement activities across the Bank's technology setting.

About You

You are a cyber security professional with experience in vulnerability management, security posture management, and cyber risk reduction within complex enterprise environments.
To be successful in this role, you will demonstrate:

- Experience with vulnerability management platforms such as Tenable, including integration with ServiceNow SecOps or comparable remediation and workflow platforms.
- Strong knowledge of vulnerability management, secure configuration

📌 Senior Cyber Security Analyst x 3 (Sydney)
🏢 Reserve Bank of Australia
📍 Sydney