The Senior Security Analyst plays a key role in protecting and governing Keyek in accordance with its security controls, risk appetite and compliance obligations. The role requires a high degree of autonomy to assess security risks, recommend corrective action and help maintain a resilient security program. This role assesses the people, technology and process elements of Keyek's technology and security environment. It identifies control gaps and works with relevant stakeholders to agree and implement appropriate remediation plans. The role also monitors emerging developments and assesses the organisation's readiness to respond. The role reports to the Chief Security Officer.
Key responsibilities
Provide pragmatic, risk-based security advice to teams that supports Keyek's security objectives and operating requirements
Work with engineering, IT, product and operations teams to embed security requirements into systems, products, workflows and governance processes
Maintain an AWS based cloud security posture to ensure it remains secure and any changes and behaviours are identified and responded to
Monitor emerging threats and changes in the operating environment, then recommend adjustments to security and technology controls where required
Support and govern vulnerability management, security assessments, remediation tracking, audit evidence collection and compliance reporting
Monitor ICT systems, cloud platforms (AWS, Azure), endpoint security tools, network activity and security logs to identify suspicious activity and potential cyber security incidents
Triage security alerts, investigate incidents, document findings and support containment, remediation and escalation activities in a timely and structured manner




Prepare policies, procedures, assessment records, registers, and audit artefacts
Support continuous improvement against relevant security frameworks and baselines, including ISO/IEC *****, the NIST Cybersecurity Framework and the Australian Essential Eight
Document, implement and maintain physical security controls across all sites
About you
Strong understanding of the security objectives to safeguard the organisation from both internal and external threats and risks
Sound knowledge of key cyber security frameworks and certification programs (ISO27K, ASD, DISP, SCO 2, NIST)
Independent thinker but a team player
Ability to influence others and improve security awareness and culture across the organisation
Knowledge of AI technologies and AI as a threat vector for information and data security
Ability to lead initiatives, work with minimal supervision and coordinate stakeholders to achieve agreed outcomes
Ability to assess systems, applications and environments and promote remediation and recommendations to increase the resilience of those
Ability to maintain and automate control validations using widely known compliance and governance platforms (Ex- Vanata, Drata)
Hands-on experience across technical security and security governance
Qualified judgement,



attention to detail and a continuous improvement mindset suitable for a high-assurance identity security environment
About us
Keyek is an Australian identity assurance company focused on delivering secure, hardware-anchored identity solutions for government, defence and enterprise customers. The company's approach is built around providing indisputable proof of identity across users, devices, systems and data, with security anchored in Hardware Security Module technology and designed to support high-assurance authentication and authorisation across complex operating environments. Keyek's security model emphasises sovereign design, hardware-protected credentials, enterprise-wide identity certainty and practical security that supports operational growth without adding unnecessary user friction.
Unlock job insights
Hirer responsiveness Salary match Number of applicants
Your application will include the following questions:
Which of the following statements best describes your right to work in Australia?
What's your expected annual base salary?
How many years' experience do you have as a Security Analyst?
How much notice are you required to give your current employer?
Have you worked in a role which requires a sound understanding of NIST Cybersecurity Framework?
Have you worked in a role which requires a sound understanding of SOC 2?
Have you worked in a role which requires a sound understanding of NIST Privacy Framework?
To help fast track investigation, please include here any other relevant details that prompted you to report this job ad as fraudulent / misleading / discriminatory / salary below minimum wage.
#J-*****-Ljbffr

📌 Senior Security Analyst\Officer (Melbourne)
🏢 KEYEK
📍 Melbourne