## Security AnalystApply: Hybrid: Sydney Office: Full time: Posted Yesterday: JR102010# ASX: Powering Australia's financial markets# # Why join the ASX?When you join ASX, you’re joining a company with a strong purpose – to power a stronger economic future by enabling a fair and dynamic marketplace for all.
In your new role, you’ll be part of a leading global securities exchange with a strong brand. We are known for being a trusted market operator and an exciting data hub.
Want to know why we are a great place to work, click on the link to learn more.www.asx.com.au/about/careers/a-great-place-to-work# We are more than a securities exchangeThe ASX team brings together talented people from a diverse range of disciplines.
We run critical market infrastructure, with 1 in 3 people employed within technology. Yet we have a unique complexity of roles across a range of disciplines such as operations, program delivery, financial products, investor engagement, risk and compliance.
We’re proud to foster a workplace where diversity is celebrated and inclusion is part of our everyday culture. Our employee-led networks champion LGBTIQ+ inclusion, promote gender equality, accessibility and wellbeing, inspire giving and volunteering, and celebrate cultural and religious events, creating a sense of belonging for all. As an AWEI Bronze employer and member of the Champions of Change Coalition for gender equality, we’re committed to a fair and inclusive workplace where everyone can thrive.
YOUR RESPONSIBILITIES
* Support vulnerability management analysis and reporting.
* Support the uplift and documentation of cyber security controls in line with best-practice frameworks, including NIST, focusing on key domains such as Identity and Access Management, Detection and Monitoring, and Vulnerability Management.




* Partner with cyber subject matter experts to assess, plan, remediate and uplift IT General Controls, including strengthening definitions, evidence requirements and reporting.
* Develop and maintain cyber governance dashboards and metrics to demonstrate compliance with cyber security requirements and obligations across key control domains, such as patching, vulnerability management and identity.
* Consolidate and analyse technical data from sources such as vulnerability scanners, CMDB and identity systems to identify compliance gaps and emerging trends.
* Translate IT general security control definitions and governance cadence into traceable, actionable and sustainable metrics.
* Translate technical data into clear visual insights for different audiences, including IT service owners, senior management and risk committees, using tools such as Power BI, Tableau or advanced Excel.
* Prepare assurance, audit and regulatory artefacts by coordinating high-quality evidence and reporting packs.
* Support the uplift of automated reporting and integration into the risk system, ServiceNow and other data platforms to enhance transparency of cyber health.
* Maintain documentation repositories, exception registers and data sources to ensure traceability and version control across governance artefacts.
* Maintain any custom code in GitLab in accordance with development standards.
* Identify opportunities to automate and streamline cyber reporting,



metrics and control-related data flows.
* Work with the Security Operations Centre and other security teams where required.
YOUR EXPERIENCE AND QUALIFICATIONSMust have* 5–8 years’ experience in cyber or technology governance, risk, compliance or assurance roles, with exposure to data-driven reporting and metrics.
* Working knowledge of cyber control domains such as identity and access management, detection and monitoring, patching and vulnerability management.
* Good understanding of frameworks and standards, such as NIST CSF, ISO 27001, ASD Essential Eight, CPS 234, COBIT and MITRE ATT&CK.;
* Demonstrated ability to analyse and visualise technical data using tools such as Power BI, Tableau or advanced Excel.
* Positive written and verbal communication skills, including the ability to translate technical or complex data into insights for technical and non-technical audiences.
* Proven ability to manage multiple governance artefacts, such as control registers, penetration-testing findings, exception logs, dashboards and evidence, with attention to accuracy and version control.
* Skilled in coordination, reporting and stakeholder engagement across technical and risk functions.Nice to have* Experience supporting or reporting on IT General Controls or control-effectiveness outcomes.
* Familiarity with enterprise risk systems and their data structures.
* Familiarity with Security Information and Event Management tools, such as Elastic.
* Exposure to data integration or automation between systems such as CMDB, vulnerability management and reporting tools.
* Experience developing or enhancing cyber, technology or risk dashboards.
* Knowledge of data storytelling or visual communication principles to convey

📌 Security Analyst (Sydney)
🏢 ASX
📍 Sydney