Cyber Security Analyst (GRC / Controls Assurance) (City of …, City of Sydney

A 4-month contract chance for an experienced GRC / Controls Assurance professional to join a large Sydney organisation, available immediately. This role is focused on controls assurance, audit support, and driving remediation across a complex IT environment. You'll be working closely with business and technical stakeholders to identify control gaps, track remediation progress, and prepare reporting for senior management. What you'll be doing:
- Conducting cyber security control reviews and testing across IT systems, applications, and networks
- Identifying control gaps and vulnerabilities through assurance reviews and providing actionable remediation recommendations
- Updating and maintaining the cyber risk register
- Preparing audit reports and presenting findings to senior management and stakeholders
- Supporting statutory audit processes
- Driving remediation of cloud issues through CSPM tooling
- Developing metrics to monitor control effectiveness What we're looking for:
- Minimum 4 years experience in a GRC, controls assurance, or cyber security audit role
- Strong understanding of security frameworks (NIST, ISO 27001, Essential Eight)
- Proven ability to engage and influence stakeholders at a senior level
- Experience preparing audit-quality reports and risk register management
- Exposure to cloud security environments (AWS and/or Azure)
- CSPM tooling experience advantageous but not essential Interested candidates that meet the required skillset of the role are encouraged to apply via the link with an updated resume. Reference BIHI #J-18808-Ljbffr Apply on Kit Job: kitjobau.com/job/3rum8e