Cyber GRC Analyst – Governance, Risk & Compliance

About the role

The Cyber GRC Analyst will join Hume City Council’s Information Technology team to develop, implement and maintain governance, risk and compliance programmes that protect council information assets and meet regulatory requirements.

Key responsibilities

• Develop and maintain cybersecurity governance frameworks aligned with standards such as VPDSS, ASD Essential Eight, ISO 27001 and PCI DSS.
• Conduct risk assessments and vulnerability analyses to identify threats and compliance gaps.
• Create, update and manage information security policies, procedures and documentation.
• Monitor the effectiveness of security controls and recommend improvements.
• Prepare and present compliance reports to management and stakeholders.
• Support internal and external audit activities with evidence and explanations of controls.
• Maintain the IT risk register, compliance tracking and metrics reporting.
• Provide guidance and training to staff on security policies and best practices.

Required profile

• Thorough understanding of technology, procedures and processes within an operating unit.
• Proven experience in cyber governance, compliance and risk, preferably in government or enterprise environments.
• Strong knowledge of GRC frameworks and methodologies (ISO 27001, ISO 42001, PCI DSS, etc.).
• Solid grasp of cybersecurity fundamentals, threats and security controls.
• Experience conducting risk assessments and compliance audits.
• Excellent analytical and problem‑solving skills with strong attention to detail.
• Proficiency in developing and documenting security policies and procedures.
• Knowledge of Victorian regulatory requirements and compliance obligations.
• Strong written and verbal communication skills.

Required skills

• Victorian Protective Data Security Standards (VPDSS)
• ASD Essential Eight
• ISO 27001
• ISO 42001
• PCI DSS

What we offer

• Permanent full‑time position
• Salary of $83,714.28 per annum plus superannuation
• Opportunity to work within a fast‑growing, culturally diverse council
• Collaborative environment with cross‑functional teams