Cyber Security Analyst

We also acknowledge the unique contribution that Aboriginal and Torres Strait Islander peoples make to our society and our workplace through their enduring and continued connection to land, sea, sky and community.

**About Us**

SBS is one of the world's most unique and innovative media organisations, producing trusted, meaningful, and engaging content that exists for all Australians to inspire, support and celebrate the diversity of our multicultural society.

Our purpose, for the last 50 years, has reflected and explored the evolving diversity of Australia, investing in initiatives to deepen its connections with communities, sharing their stories and giving a voice to those often unheard, with the aim of increasing understanding and respect of the differences that make up Australia.

SBS is a truly distinctive network, showcasing multicultural, multilingual and First Nations stories otherwise untold in the Australian media.
- This role is classified as Level 3 Business Support role under SBS Australia's current Enterprise Agreement (with a base salary range of $89,140 - $96,482). The successful applicant will be offered remuneration that is commensurate with their skills and experience and in alignment with this framework._

**The Role**

The Cyber Security Analyst plays a vital role in the protection of SBS’s systems and information. This position is responsible for monitoring and responding to security alerts and incidents; designing, implementing and operating security controls; and contributing to risk assessments and broader security initiatives. The role also supports SBS-wide efforts to enhance security awareness and uplift overall security maturity.

The Cyber Security Team is responsible for the development, implementation, operation, and continuous monitoring of SBS’s cyber defences. The team operates during during business hours and is available on-call outside of business hours.

**Main Tasks**

**Threat Detection & Incident Response**
- Recognise and assess both successful and attempted intrusions into the environment.
- Conduct security incident investigations using log data and multiple information sources.
- Respond to incidents within defined SLAs, following established incident response protocols.
- Maintain and improve incident response plans and related documentation.
- Support legally defensible evidence collection during incidents.

**Security Controls & Risk Management**
- Recommend and implement appropriate technical and procedural security controls to address identified risks.
- Maintain and update the Information Security Risk Register.
- Review systems and networks for vulnerabilities; propose and support remediation efforts.
- Evaluate current security advisories, publications, and trends; coordinate internal response as necessary.
- Recommend improvements to system and network security posture, both technical and non-technical.
- Actively participate across multiple security uplift projects.

**Governance, Compliance & Reporting**
- Investigate and document instances of non-compliance with security policies and standards.
- Prepare clear and accurate reports on security metrics, audit findings, and incident response activities.
- Assist with internal and external audits and risk assessments.
- Awareness, Collaboration & Continuous Improvement
- Support the development and delivery of phishing simulation and awareness programs across SBS.
- Assist in preparing and delivering security training sessions to SBS Divisions.
- Engage with internal stakeholders and external vendors to share threat intelligence and strengthen defensive capabilities.
- Stay up to date with the evolving threat landscape, emerging tools, and industry best practices.
- Create and maintain accurate documentation on security processes and procedures.

**About You**

You are already working in Cyber Security or a related role for around the last 1 to 2 years. Having exposure to Cyber Security within the media industry would be a significant advantage.

You will have a passion for Cyber Security and Threat intelligence with an ability to assess a situation using multiple data sources and to make a judgement on how to best proceed. You have good communication skills and feel comfortable talking to groups of people to present on topics related to Cyber Security.
- Essentials:_
- Familiar with cloud computing, networking, firewall, and ITSM concepts
- Experience with Microsoft security platforms
- Critical thinking and problem-solving skills
- Knowledge of standards and frameworks including, NIST, ASD Essential 8
- Experience working with Linux and/or Unix based systems as well as Microsoft Windows operating systems
- Knowledge of security capabilities and tools including, Data Loss Prevention, Endpoint Protection, SIEM solutions
- Good understanding of security principles, such as access control, security protocols, vulnerability management, incident, and event management
- Be willing to work flexibly in respons