Mid-Level Information Security Analyst

About the role

A growing threat management team within the information security function of a reputable organisation in Brisbane CBD is looking for a mid-level Information Security Analyst. The role sits in a national organisation and offers hybrid working. It focuses on cyber security governance, risk, assurance and vulnerability management, working closely with business and technology stakeholders to strengthen the organisation's security posture. The position is advertised as a contract role with possible extension.

Key responsibilities

• Manage vulnerabilities and remediation activities
• Coordinate security testing and assurance reviews
• Conduct third-party security assessments
• Support security governance, risk and compliance initiatives
• Track and report on security risks and remediation progress
• Partner with business and technology stakeholders to improve security controls and processes

Required profile

• 3 to 6 years' experience in information security, cyber security, GRC, security assurance or technology risk
• Strong understanding of security governance, risk and compliance principles
• Experience with vulnerability management and remediation activities
• Previous experience in financial organisations or highly regulated environments is an asset

Required skills

• Knowledge of security frameworks such as ISO 27001 and NIST
• Strong stakeholder engagement and communication skills
• Ability to manage competing priorities and deliver outcomes