Senior Cyber Security Analyst | 12-Month Contract | Sydney

An exciting opportunity is available for an experienced Senior Cyber Security Analyst to join a large, complex enterprise environment and play a key role in strengthening cyber resilience.

This 12-month contract, based in Sydney with hybrid working, will focus on vulnerability management, security posture, CIS compliance and risk-based remediation.

The role

Working across cyber security, infrastructure, technology, architecture, risk and audit teams, you will identify vulnerabilities, assess cyber risk and help drive remediation across a complex technology environment.

A key focus of the position will be configuring and tailoring CIS Benchmarks and compliance policies to organisational requirements, rather than simply relying on out-of-the-box controls.

Key responsibilities

- Conduct vulnerability assessments, security posture reviews and compliance monitoring.
- Configure, run and interpret CIS Benchmark compliance scans within vulnerability management tooling.
- Customise CIS Benchmarks and compliance policies, including checks, exclusions, thresholds and policy settings.
- Apply risk-based vulnerability prioritisation using factors such as exploitability, threat intelligence and asset criticality.
- Work with technical and business stakeholders to drive vulnerability remediation and cyber risk reduction.
- Provide expertise around secure configuration, system hardening and security control effectiveness.
- Support compliance assessments, audits, control assurance and cyber risk activities.
- Produce reporting, metrics and insights to support cyber risk management and decision-making.
- Drive continuous improvement across vulnerability and security posture management.

About you





We're looking for an experienced cyber security professional who combines strong hands-on technical capability with excellent stakeholder engagement skills.

You will bring:

- Strong hands-on vulnerability management and remediation experience within complex enterprise environments.
- Practical experience using Tenable, Qualys, Rapid7 or an equivalent vulnerability management platform.
- Demonstrated experience customising CIS Benchmarks and compliance policies to meet organisational requirements.
- Hands-on experience configuring, running and interpreting CIS Benchmark compliance scans.
- Experience with risk-based vulnerability prioritisation, including exploitability, threat intelligence and asset criticality.
- Experience across security posture management, exposure management or attack surface management.
- Knowledge of secure configuration standards and system hardening.
- Experience supporting compliance assessments, audits, control assurance and cyber risk activities.
- Strong stakeholder engagement and communication skills, with the ability to influence technical and business teams.
- The ability to manage competing priorities, drive remediation outcomes and clearly communicate cyber risks and recommendations.

Highly regarded

- Knowledge of the Essential Eight, ASD ISM, NIST CSF and CIS Benchmarks.
- Experience with Microsoft Defender,



Microsoft Sentinel or similar enterprise security platforms.
- Certifications such as CISSP, CISM, CRISC or GIAC.
- Tertiary qualifications in Cyber Security, IT, Computer Science or a related field.

What's on offer?

- 12-month contract
- Sydney location
- Hybrid working
- Prospect to work within a large and complex enterprise technology environment
- Highly technical role with a strong focus on vulnerability, exposure and security posture management
- Opportunity to influence remediation and cyber risk reduction across multiple technology teams

If you have strong vulnerability management experience and enjoy combining hands-on security expertise with stakeholder engagement and risk-based remediation, we'd like to hear from you.

Join our growing global team and accelerate your career with us. Apply today.

For more information about this or other opportunities, please contact Kumar Kuchipudi. Please quote our job reference number 680868.

About us

NTT Ltd. is a global ICT provider, employing more than 40,000 people in a diverse and dynamic workplace, and delivering services in over 200 countries and regions. We partner with organizations around the world to shape and achieve outcomes through intelligent technology solutions. For us, intelligent means data driven, connected, digital, and secure.

NTT is proud to be an equal opportunity employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, color, sex, religion, national origin, disability, pregnancy, marital status, sexual orientation, gender reassignment, veteran status, or other protected category.

📌 Senior Cyber Security Analyst (Sydney)
🏢 Ntt
📍 Sydney