Cyber Governance & Risk Analyst

About the role

This newly created position sits within a fast‑growing financial services organisation and focuses on strengthening cyber governance, risk and compliance across identity, data and supplier domains. You will work in a close‑knit team, receive mentorship from an experienced manager and operate in a hybrid work model from the Sydney CBD office.

Key responsibilities

• Develop and maintain identity and access governance processes, including onboarding/off‑boarding and user access reviews.
• Coordinate data risk remediation activities and track progress against governance action registers.
• Conduct supplier security assessments, review questionnaires, ISO certifications and penetration test reports, and maintain supplier risk registers.
• Support the ISO 27001‑certified ISMS through policy reviews, evidence collection, audits and preparation for surveillance audits.
• Assist with cyber risk assessments, maintain risk registers, and prepare KPI/KRI dashboards and committee reports for senior leadership.
• Engage with technology, risk, HR, procurement and business stakeholders to drive remediation accountability and promote cyber awareness initiatives.

Required profile

• Early‑career professional or junior analyst with exposure to cyber GRC concepts.
• Strong interest in identity governance, data protection and supplier risk management.
• Ability to work in a fast‑paced, evolving environment and collaborate across multiple functions.

Required skills

• Knowledge of ISO 27001 and ISMS frameworks.
• Experience with identity and access governance processes.
• Understanding of data governance and risk remediation.
• Familiarity with supplier risk assessment and security assurance documentation.

What we offer

• Training, mentorship and a clear career progression path.
• Hybrid working arrangement.
• Opportunity to shape and uplift the organisation’s cyber governance capabilities.