Grc Cyber Analyst

4 days ago


Melbourne, Australia Arup Full time

A career at Arup offers you the chance to make a positive difference in the world. Independently owned and independently minded, we attract a diverse mix of people to work on ground-breaking global projects. We have an ambitious commitment to be the digital leader in the built environment and have digital teams and experts all over the world, who collaborate on world-leading software, data and technology projects and products. Being a global team means we value people with diverse experiences, backgrounds, specialisms and skills.

**About Arup**

The people at Arup are driven to find a better way and to deliver better solutions for our clients.

We’ve always been a purpose-led organisation. we are here to support each other, to do our best work possible and make our own special contribution. We’re here to shape a better world, and for us ‘better’ is all about creating a more sustainable future for the world.

**The role**

We are looking for a governance, risk and compliance (GRC) cyber analyst for our growing global cyber security team. You will help protect Arup’s digital infrastructure and data from cyber-attack. You will help to assess Arup’s information and cyber risks, define Arup’s security policies, standards and guidelines, run a cyber education and awareness programme, manage supply chain cyber risk, manage data loss prevention and ensure that Arup is compliant with relevant cyber legislation and standards.

The GRC team is distributed globally. The cyber security analyst role reports to the GRC service leader based in UK.
- “Being a graduate and starting in a new team can be intimidating, but from my very first day with the Cyber Security team I felt welcome. Across varying skill levels, ranging from juniors to top industry professionals, the team goes above and beyond to support each other, find solutions, and build companywide awareness of the importance of cyber security. Your perspective is always considered and appreciated, which really makes you feel like you’re making a difference to Arup and to our people's security. This has been a motivating and empowering experience for me throughout these uncertain times." - _Yana, UK_
- You are interested in cyber security, and have a solid foundation in technology
- You have an analytical mind and enjoy solving problems
- You enjoy learning new skills and sharing your knowledge with others

**Responsibilities of the role include**:

- Representing cyber in Australasia region for any cyber related requests and issues
- Ensure compliance with Arup’s information security control framework
- Coordinating cyber security awareness campaigns in Australasia region
- Liaising with stakeholders in the Australasia region for new developments in Digital and drive security by design
- Conducting threat and risk assessments and drive risk closure
- Keeping Arup’s cloud and other information environments secure and compliant
- Conducting supply chain cyber due diligence
- Working with the software development community to ensure digital products and services are secure by design
- Helping to deliver Arup’s data loss prevention program
- Driving IT disaster compliance activities
- Driving security control assessments and thriving for raising the compliance level in Australasia region
- Measuring cyber processes, controls and reporting on the effectiveness of the cyber management plan

**Requirements and skills**

**Essential skills and knowledge**:

- Analytical and problem-solving skills to identify and assess risks and threats
- Some industry GRC or information risk management experience desirable
- Understanding of data loss prevention techniques
- Excellent emotional intelligence to foster openness and transparency within the team
- Experience in information risk management

**Desirable skills and knowledge**:

- Knowledge of compliance and audit
- Experience on industry standards NIST, CIS and ISO22301

**Required attributes**:

- Australian Citizen or Permanent Resident
- The ability to empower others to succeed, giving staff the confidence and support to thrive, develop and excel at what they do
- Excellent written/verbal communication skills with both non-technical as well as technical audiences managing successful communications with governance boards and stakeholders
- Open-minded collaborative approach to problem solving, improvement and leadership with an empathy for the needs of clients and customers
- Ability to influence others to consider your point of view and gain support and agreement for plans, changes and new approaches
- Ability to establish and agree direction when there is lack of clarity from stakeholders
- Self-starter, pragmatic, flexible and comfortable with ambiguity, able to align business and Digital Technology Group vision to deliver clarity

**Qualifications**
- University degree level qualification or equivalent industry experience

**Salary Range**
- $90,000-100,000AUD

No agencies please

Stay safe online


  • Cyber Grc Analyst

    3 weeks ago


    Melbourne, Australia FourQuarters Full time

    **The Company** *** This large critical infrastructure organisation has a multitude of projects in the pipeline across 3rd party risk and Identity. Due to this, a new role for a Cyber GRC Analyst has been created to perform the work above as well as generalist security governance, risk and compliance functions. **The Role** This job opportunity would...

  • Grc Cyber Analyst

    7 days ago


    Melbourne, Australia Arup Full time

    **Joining Arup** Arup’s purpose, shared values and collaborative approach has set us apart for over 75 years, guiding how we shape a better world. As a governance, risk and compliance (GRC) cyber analyst for our growing global cyber security team you will help protect Arup’s digital infrastructure and data from cyber-attack. You will help to assess...

  • Cyber Grc Analyst

    1 week ago


    Melbourne, Victoria, Australia FourQuarters Full time

    The Company***This large critical infrastructure organisation has a multitude of projects in the pipeline across 3rd party risk and Identity.Due to this, a new role for a Cyber GRC Analyst has been created to perform the work above as well as generalist security governance, risk and compliance functions.The RoleThis job opportunity would suit someone who has...

  • Grc Cyber Analyst

    1 week ago


    Melbourne, Victoria, Australia Arup Full time

    Joining ArupArup's purpose, shared values and collaborative approach has set us apart for over 75 years, guiding how we shape a better world.As a governance, risk and compliance (GRC) cyber analyst for our growing global cyber securityteam you will help protect Arup's digital infrastructure and data from cyber-attack. You will help toassess Arup's...

  • Grc Analyst

    4 weeks ago


    Melbourne, Australia Latitude IT Full time

    Multi-billion dollar international organization. - Opportunity to liaise with multiple security teams. - Hybrid work arrangement. Are you a seasoned Security Analyst with a passion for GRC? Our multi-billion dollar international client is seeking a skilled professional to join their team in Melbourne and take on the role of GRC Analyst. - Multi-billion...

  • Grc Analyst

    1 week ago


    Melbourne, Victoria, Australia Latitude IT Full time

    Multi-billion dollar international organization. Opportunity to liaise with multiple security teams. Hybrid work arrangement.Are you a seasoned Security Analyst with a passion for GRC? Our multi-billion dollar international client is seeking a skilled professional to join their team in Melbourne and take on the role of GRC Analyst. Multibillion dollar...

  • Cyber Grc Lead

    3 weeks ago


    Melbourne, Australia FourQuarters Full time

    **The Company** This enterprise level critical infrastructure organisation has many varied devices in the IoT space and a large attack surface. And with a growing amount of threat actor groups targeting this industry, there has been a number of new roles created, including this Lead Cyber GRC position. **The Role** This job opportunity would suit someone...

  • Cyber Grc Lead

    1 week ago


    Melbourne, Victoria, Australia FourQuarters Full time

    The CompanyThis enterprise level critical infrastructure organisation has many varied devices in the IoT space and a large attack surface.And with a growing amount of threat actor groups targeting this industry, there has been a number of new roles created, including this Lead Cyber GRC position.The RoleThis job opportunity would suit someone who has...

  • Security Grc Analyst

    2 months ago


    Melbourne, Australia Hudson Australia Full time

    You'll be an SME on cyber GRC within the company, advising, designing and implementing fit for purpose security controls to protect data and meet compliance requirements. The role can be performed remotely from anywhere within Australia! Responsibilities of the role include but are not limited to: - Implementing security controls, risk assessment...


  • Melbourne, Australia Hudson Australia Full time

    You'll be an SME on cyber GRC within the company, advising, designing and implementing fit for purpose security controls to protect data and meet compliance requirements. The role can be performed remotely from anywhere within Australia! Responsibilities of the role include but are not limited to: - Implementing security controls, risk assessment...


  • Melbourne, Victoria, Australia Hudson Australia Full time

    You'll be an SME on cyber GRC within the company, advising, designing and implementing fit for purpose security controls to protect data and meet compliance requirements.The role can be performed remotely from anywhere within AustraliaResponsibilities of the role include but are not limited to:Implementing security controls, risk assessment framework, to...

  • Cyber security

    2 months ago


    Melbourne, Australia Infosys Singapore & Australia Full time

    Infosys Consulting is the worldwide management and IT consultancy unit of the Infosys Group (NYSE: INFY), a global advisor to leading companies for strategy, process engineering and technology-enabled transformation programs. We partner with clients to design and implement customized solutions to address their complex business challenges, and to help them in...

  • Grc Specialist

    2 months ago


    Melbourne, Australia Capstone Full time

    6 Month Contract + Further Extensions - Melbourne CBD Location - 1 Day in the Office - Great Daily Rate $$$ **GRC Analyst/Specialist - Archer** We currently seek an experienced GRC Analyst/Specialist that can manage Cyber Security Risk & Compliance capabilities including reporting, confirmation, reviews, and mitigation activities. You will also be...

  • Grc Specialist

    3 weeks ago


    Melbourne, Australia Capstone Full time

    6 Month Contract + Further Extensions - Melbourne CBD Location - 1 Day in the Office - Great Daily Rate $$$ **GRC Analyst/Specialist - Archer** We currently seek an experienced GRC Analyst/Specialist that can manage Cyber Security Risk & Compliance capabilities including reporting, confirmation, reviews, and mitigation activities. You will also be...


  • Melbourne, Australia PRA Full time

    Our client is a leader within the financial services industry, with a purpose driven outlook for the future of both people, communities and the environment. Our client now has a requirement for a mid-senior level GRC Information Security Analyst to join their growing security team. What You Will Bring: - One or more related certifications such as CISSP,...


  • Melbourne, Victoria, Australia Cyber Crime Full time

    Lead and manage requirements for cyber security initiatives and improvementsDevelop business cases and cost-benefit analyses for cyber security investmentsMax term contractProgram Visionary: Lead Business Analysis for Cyber SecurityInsignia Financial is transforming its cyber security landscape with a strategic 3-year program, encompassing four strategic...


  • Melbourne, Victoria, Australia Cyber Crime Full time

    Lead and manage requirements for cyber security initiatives and improvements Develop business cases and cost-benefit analyses for cyber security investments Max term contract Program Visionary: Lead Business Analysis for Cyber Security Insignia Financial is transforming its cyber security landscape with a strategic 3-year program, encompassing four strategic...


  • Melbourne, Victoria, Australia Cyber Crime Full time

    Lead and manage requirements for cyber security initiatives and improvementsDevelop business cases and cost-benefit analyses for cyber security investmentsMax term contractProgram Visionary: Lead Business Analysis for Cyber SecurityInsignia Financial is transforming its cyber security landscape with a strategic 3-year program, encompassing four strategic...

  • Senior GRC Analyst

    1 week ago


    Melbourne, Victoria, Australia Latitude IT Full time

    Collaborative, supportive, Values driven environmentGreat coffee (and a variety of tea) and fresh fruitAvoid the traffic: we are outside the CBD and close to public transportEngage with cutting-edge cybersecurity technologies and methodologies.Drive impactful risk management initiatives in a dynamic environment.Collaborate with skilled professionals in a...

  • Senior GRC Analyst

    2 weeks ago


    Melbourne, Australia Latitude IT Full time

    Collaborative, supportive, Values driven environmentGreat coffee (and a variety of tea) and fresh fruitAvoid the traffic: we are outside the CBD and close to public transportEngage with cutting-edge cybersecurity technologies and methodologies.Drive impactful risk management initiatives in a dynamic environment.Collaborate with skilled professionals in a...