The Senior Security Analyst plays a key role in protecting and governing Keyek in accordance with its security controls, risk appetite and compliance obligations.
The role requires a high degree of autonomy to assess security risks, recommend corrective action and help maintain a resilient security program.
This role assesses the people, technology and process elements of Keyek's technology and security environment.
It identifies control gaps and works with relevant stakeholders to agree and implement appropriate remediation plans.
The role also monitors emerging developments and assesses the organisation's readiness to respond.
The role reports to the Chief Security Officer.Key responsibilitiesProvide pragmatic, risk-based security advice to teams that supports Keyek's security objectives and operating requirementsWork with engineering, IT, product and operations teams to embed security requirements into systems, products, workflows and governance processesMaintain an AWS based cloud security posture to ensure it remains secure and any changes and behaviours are identified and responded toMonitor emerging threats and changes in the operating environment, then recommend adjustments to security and technology controls where requiredSupport and govern vulnerability management, security assessments, remediation tracking, audit evidence collection and compliance reportingMonitor ICT systems, cloud platforms (AWS, Azure), endpoint security tools, network activity and security logs to identify suspicious activity and potential cyber security incidentsTriage security alerts, investigate incidents, document findings and support containment,



remediation and escalation activities in a timely and structured mannerPrepare policies, procedures, assessment records, registers, and audit artefactsSupport continuous improvement against relevant security frameworks and baselines, including ISO/IEC *****, the NIST Cybersecurity Framework and the Australian Essential EightDocument, implement and maintain physical security controls across all sitesAbout youStrong understanding of the security objectives to safeguard the organisation from both internal and external threats and risksSound knowledge of key cyber security frameworks and certification programs (ISO27K, ASD, DISP, SCO 2, NIST)Independent thinker but a team playerAbility to influence others and improve security awareness and culture across the organisationKnowledge of AI technologies and AI as a threat vector for information and data securityAbility to lead initiatives, work with minimal supervision and coordinate stakeholders to achieve agreed outcomesAbility to assess systems, applications and environments and promote remediation and recommendations to increase the resilience of thoseAbility to maintain and automate control validations using widely known compliance and governance platforms (Ex- Vanata, Drata)Hands-on experience across technical security and security governanceProfessional judgement,



attention to detail and a continuous improvement mindset suitable for a high-assurance identity security environmentAbout usKeyek is an Australian identity assurance company focused on delivering secure, hardware-anchored identity solutions for government, defence and enterprise customers.
The company's approach is built around providing indisputable proof of identity across users, devices, systems and data, with security anchored in Hardware Security Module technology and designed to support high-assurance authentication and authorisation across complex operating environments.
Keyek's security model emphasises sovereign design, hardware-protected credentials, enterprise-wide identity certainty and practical security that supports operational growth without adding unnecessary user friction.Unlock job insightsHirer responsiveness Salary match Number of applicantsYour application will include the following questions:Which of the following statements best describes your right to work in Australia?
What's your expected annual base salary?
How many years' experience do you have as a Security Analyst?
How much notice are you required to give your current employer?
Have you worked in a role which requires a sound understanding of NIST Cybersecurity Framework?
Have you worked in a role which requires a sound understanding of SOC 2?
Have you worked in a role which requires a sound understanding of NIST Privacy Framework?
To help rapid track investigation, please include here any other relevant details that prompted you to report this job ad as fraudulent / misleading / discriminatory / salary below minimum wage.
#J-*****-Ljbffr

📌 Senior Security Analyst\Officer (Melbourne)
🏢 KEYEK
📍 Melbourne