Cyber Governance & Risk Analyst

About the role

A newly created Cyber Governance & Risk Analyst position in a mid-sized financial services organisation employing around 1,800 people across Australia. The role focuses on identity governance, data risk management, supplier assurance, ISO 27001 compliance and cyber risk reporting, with hands-on work including policy writing, stakeholder engagement, security assessments and security training. It is based in the Sydney CBD with hybrid working available.

Key responsibilities

• Data risk and information governance: coordinate data risk remediation, monitor remediation progress and maintain action registers, and support reporting on data governance and information protection.
• ISO 27001: support the maintenance of the ISO 27001-certified ISMS, coordinate policy reviews, evidence collection, audits and compliance activities, and support preparation for surveillance audits and management reviews.
• Supplier risk: conduct security assessments and due diligence, review security questionnaires, ISO certifications, penetration test reports and assurance documentation, and maintain supplier risk registers.
• Identity and access governance: support onboarding/offboarding improvements, coordinate user access reviews and track remediation of access risks and control gaps.
• Risk reporting: support cyber risk assessments and risk register maintenance, prepare reports, KPI/KRI dashboards and committee packs, and contribute to board and executive cyber risk reporting.
• Stakeholder engagement: build relationships across Technology, Risk, HR, Procurement and business teams, drive accountability for remediation and support cyber awareness initiatives.

Required profile

• Cyber GRC exposure across identity and access governance, data governance and supplier governance.
• Experience with NIST and/or ISO 27001 frameworks.
• Background in highly regulated, risk-focused environments.
• Interest in a career in Cyber Governance, Risk & Compliance.
• Attention to detail, strong report writing and organisational skills, and ability to coordinate multiple initiatives.
• Strong stakeholder engagement and communication skills.

What we offer

• Salary of $100,000 - $120,000 plus superannuation, depending on experience.
• Training, mentorship and a clear career path.
• Hybrid working and a Sydney CBD office.

The role is full-time and permanent. Australian citizenship or permanent residency is required.