- Melbourne, Victoria, Australia
- Hybrid
- Full-time · Senior
The Senior Cyber GRC Analyst is a key role within the GRC team and strengthens REA's cyber resilience by leading the identification, assessment and treatment of technology and information security risks, ensuring our products and platforms comply with relevant security, privacy and regulatory requirements, and enabling informed, risk-based decisions that protect our customers, people and brand while supporting sustainable business growth.
Responsibilities
- Design, implement and continuously improve cyber GRC frameworks, policies, standards and supporting processes
- Work closely with other teams within REA Security to ensure they are effectively prioritising the building and operation of cyber security controls
- Coordinate and oversee control assurance activities (e.g. control testing, audits, attestations) and track remediation through closure
- Ensure that external compliance obligations and audits are appropriately prepared for and managed
- Provide specialist cyber GRC advice and coaching to technology and product teams to embed secure-by-design and risk-based thinking
Requirements
- Relevant tertiary qualification in Information Security, IT, Risk or related discipline, or equivalent practical experience