Cyber Security Analyst

An established Australian organisation operating critical infrastructure and complex operational environments is seeking a Cyber Security Analyst to join its technology team.

This is a newly created position offering the opportunity to help shape and mature cyber security capabilities across corporate IT, Operational Technology (OT) and Internet of Things (IoT) environments. Working closely with the Enterprise Infrastructure Manager, you will play a key role in strengthening security controls, managing risk, improving resilience and supporting critical business operations.

About The Role As the Cyber Security Analyst, you will be responsible for the design, implementation and ongoing support of cyber security controls across a diverse technology landscape.

You will work across security engineering, vulnerability management, compliance, incident response and continuous improvement initiatives, helping to build a robust and scalable cyber security capability.

Key Responsibilities Security Engineering & Operations

• Design, implement and maintain cyber security controls across IT, OT and IoT environments.
• Deploy, configure and support security technologies including EDR, IAM, firewalls, SASE, encryption and endpoint security solutions.
• Integrate security controls into infrastructure, cloud and application environments.
• Support DevSecOps initiatives and embed security into development and deployment processes.
• Leverage automation and orchestration to improve security operations and compliance.

Risk, Compliance & Governance

• Conduct cyber security risk assessments, vulnerability management activities and security reviews.
• Support compliance with recognised frameworks including Essential Eight, NIST, ISA/IEC 62443 and AESCSF.
• Assist with the development and implementation of cyber security standards, policies and controls.
• Ensure security practices align with organisational risk and regulatory requirements.

Incident Response & Threat Management

• Participate in cyber security incident response activities and investigations.
• Act as a key member of the Cyber Security Incident Response Team (CSIRT).
• Support business continuity, disaster recovery and resilience initiatives.
• Incorporate threat intelligence into security operations to proactively identify and mitigate emerging risks.

Continuous Improvement

• Drive improvements in cyber security tooling, processes and operational maturity.
• Enhance monitoring, detection and response capabilities through automation.
• Stay current with emerging threats, technologies and industry best practices.
• Provide security guidance and mentoring to technical and business stakeholders.

Skills & Experience Essential

• Strong knowledge of cyber security principles, frameworks and best practices.

• Hands-on experience with key security technologies including:

• Endpoint Detection & Response (EDR)

• Identity & Access Management (IAM)

• Firewalls and network security

• SASE solutions

• Data Loss Prevention (DLP)

• Email security and anti-malware technologies

• Experience with vulnerability management, security assessments and risk remediation.

• Exposure to Zero Trust security models, PAM, NDR, UEBA and application security.

• Strong understanding of Microsoft Azure and Microsoft 365 security.

• Knowledge of Linux environments and enterprise mobility platforms.

• Excellent communication, stakeholder engagement and problem-solving skills.

• Ability to assess, communicate and manage cyber security risks.

Highly Regarded

• Experience working within Operational Technology (OT), industrial or critical infrastructure environments.
• DevSecOps, automation and orchestration experience.
• Exposure to cloud security and infrastructure security engineering.
• Experience mentoring or providing technical leadership within security teams.

Qualifications

• Degree in Cyber Security, Information Technology, Engineering or a related discipline, or equivalent practical experience.
• Industry certifications such as CISSP, CISM, Security+, Azure Security, GIAC or equivalent will be highly regarded.
• Minimum 3 years' experience in cyber security-focused roles.
• Demonstrated experience working with frameworks such as Essential Eight, NIST, ISA/IEC 62443 or AESCSF.

If you're a hands-on Cyber Security professional looking for an opportunity to make a significant impact and help shape the future security posture of a complex organisation, we'd love to hear from you.