Cyber Security Analyst

About the role

IMB, a member-owned bank, is looking for a Cyber Security Analyst to strengthen its cyber security capability, manage emerging risks and embed security across technology and business operations. The role works closely with technology teams, risk professionals, auditors, contract managers and business stakeholders to support the Cyber Security Strategy, security governance framework and compliance obligations, including APRA CPS 234.

Key responsibilities

• Identify, assess and report on cyber security risks across the organisation
• Support the ongoing development and operation of security frameworks, policies and controls
• Monitor security compliance, risk reporting and governance activities
• Review technical designs, access controls, cloud environments and security configurations
• Identify security requirements for new applications and products
• Conduct security assessments, control testing, vendor reviews and third-party risk evaluations, including contract reviews
• Support the investigation of security incidents and vulnerabilities with managed security service partners
• Help incorporate security requirements into projects and change initiatives, and contribute to security awareness initiatives

Required profile

• 2+ years' experience in infrastructure, engineering, cyber security, IT risk or a related technology discipline, ideally in a large or complex environment or a mature MSPA
• Solid understanding of network, cloud, endpoint and identity concepts and how they are secured
• Knowledge of, or exposure to, security frameworks such as ISO 27001, NIST, SOC 2, ASD Essential Eight and APRA CPS 234
• Experience with risk assessments, compliance activities, control reviews and third-party risk
• Ability to communicate technical information clearly to varied audiences, with strong analytical, problem-solving and stakeholder engagement skills
• APRA-regulated entity experience, hands-on Microsoft experience and relevant certifications are highly regarded

What we offer

• Training and onboarding, genuine career pathways and a supportive, inclusive culture
• Wellbeing days and a friendly, professional team environment
• Product concessions, purchase leave options and paid parental leave