WorkCover Queensland is entering an exciting new chapter, guided by a renewed strategic focus and strong executive leadership shaping our 2030 Strategy. We’re embarking on an enterprise-wide transformation to strengthen our impact and continue making a positive difference in people’s lives.

The Opportunity

At WorkCover Queensland, cyber security plays an key role in protecting the information and services that support Queensland workers and employers. We’re looking for a Cyber Security GRC Analyst to help strengthen our cyber governance, risk and compliance capability and contribute to our ongoing cyber resilience.

Working within our Cyber Security team, you’ll conduct cyber risk assessments, assess the effectiveness of security controls and support assurance, audit and compliance activities. You’ll partner with technical and business stakeholders to identify cyber risks and control gaps, support practical remediation and provide advice that enables informed decision-making.

You’ll also contribute to the continuous improvement of our cyber security policies, standards, frameworks and processes, while turning cyber risk and compliance information into meaningful insights that strengthen risk ownership across the organisation.

Key Responsibilities:

- Conduct cyber risk assessments, control assurance and compliance activities in line with WorkCover’s Information Security Management System, regulatory obligations and approved cyber security frameworks.
- Assess the design and operating effectiveness of cyber security controls, documenting findings, evidence, risk implications and recommended improvements.
- Support internal audits and external certification activities by coordinating evidence,



validating controls and maintaining accurate and traceable assurance records.
- Partner with technical and business stakeholders to identify cyber risks, control gaps and compliance issues and support sustainable remediation.
- Analyse cyber risk, control and compliance information to develop meaningful reporting and insights that support risk-based decisions.
- Provide practical cyber governance and risk advice and contribute to improvements across policies, standards, frameworks and processes.
- Monitor emerging cyber risks, regulatory requirements and industry developments, and contribute to initiatives that strengthen cyber awareness and risk ownership.

About You

You’re an analytical and collaborative cyber professional who enjoys understanding risk, working through complex issues and turning security requirements into practical outcomes. You can communicate clearly with technical and non-technical stakeholders and enjoy working across teams to strengthen cyber security practices.

You’ll bring:

- Experience in cyber security, technology risk, security governance or a related discipline within a complex or regulated environment.
- Experience conducting cyber risk assessments and assessing and reporting on the effectiveness of cyber security controls.
- Working knowledge of NIST Cybersecurity Framework, ISO 27001, Essential Eight and IS18, or comparable standards.




- Experience supporting audits, compliance activities, control assurance and remediation of cyber risks and control gaps.
- The ability to interpret regulatory, policy and framework requirements and translate them into practical cyber security controls and governance processes.
- Experience maintaining accurate and auditable cyber risk, control and compliance records within a GRC platform.
- Sound knowledge of cyber security technologies, Microsoft security products and cloud environments such as Azure and AWS.
- Strong analytical, communication and stakeholder engagement skills, with the ability to manage competing priorities and contribute to cross-functional outcomes.
- A tertiary qualification in cyber security, information technology or a related discipline, or equivalent relevant professional experience.

If you’re looking to broaden your experience across cyber governance, risk, assurance and compliance while contributing to stronger cyber resilience at WorkCover Queensland, we’d love to hear from you.

Why Join Us

Our vision is to be the best workers’ compensation insurer, making a positive difference to people’s lives and keeping Queenslanders working. At WorkCover, we deliver with heart, own our outcomes, work best together and stay open to what’s possible - and we’re looking for people who share these values

When you join us, you’ll benefit from:

- A purpose‑driven organisation where your work genuinely makes a positive impact on Queenslanders’ lives
- A collaborative and supportive team environment that values empathy, trust and working together
- Hybrid work arrangements that support flexibility and work–life

📌 Cyber Security GRC Analyst (Brisbane)
🏢 WorkCover Queensland
📍 Brisbane