Senior Cyber GRC Analyst

We’re looking for a Senior Cyber GRC Analyst to join our Cyber Security team and help strengthen WorkCover Queensland’s cyber governance, risk, compliance and assurance capability. The Opportunity As a Senior Cyber GRC Analyst, you’ll play an important role in strengthening WorkCover’s cyber resilience and helping the organisation understand and manage cyber risk. You’ll lead complex cyber risk and control assessments, contribute to the ongoing development of our cyber assurance program and provide trusted advice to senior stakeholders.

Your work will help provide greater visibility of our control effectiveness, risk exposure and remediation priorities, supporting informed decision-making across WorkCover. Working collaboratively across Cyber Security, Technology and the broader organisation, you’ll also help evolve our cyber security policies, standards, frameworks and risk management practices. You’ll translate complex technical issues into meaningful business insights and help embed strong cyber risk ownership across WorkCover.

Key areas of focus include: Leading cyber security risk assessments, including third-party due diligence and remediation activities. Assessing the design and operating effectiveness of cyber security controls. Supporting the design, delivery and continuous improvement of WorkCover’s cyber assurance program. Providing practical GRC advice and insights to senior and executive stakeholders. Developing meaningful cyber risk, control and performance reporting.

Improving cyber security policies, standards, frameworks and risk management practices. Supporting cyber awareness and capability uplift across the organisation About You You’re an experienced cyber risk and governance professional who enjoys working through complex challenges and turning technical information into practical business outcomes. You’re comfortable engaging with stakeholders at different levels, constructively challenging decisions and providing clear, evidence-based advice.

To be successful, you’ll bring: Extensive experience in cyber security, technology risk, cyber governance or a related discipline within complex or regulated environments. Experience designing and delivering cyber assurance programs and assessing security control effectiveness. Strong experience leading cyber risk assessments, including third-party risk and remediation. Practical knowledge of frameworks including NIST Cybersecurity Framework, ISO 27001, Essential Eight, CCM v4 and IS18.

Experience across cyber governance, risk, audit and compliance activities. The ability to develop meaningful cyber risk and performance reporting for governance and senior stakeholders. Strong technical understanding of Microsoft security products and cloud environments such as Azure and AWS. Highly developed communication, influencing and stakeholder engagement skills. The ability to lead and mentor others while coordinating priorities across teams.If you’re looking for an opportunity to influence cyber risk and assurance at an enterprise level, strengthen WorkCover’s cyber resilience and contribute to meaningful outcomes across the organisation, we’d love to hear from you.

How do I apply? If this sounds like you, we’d love to hear from you. Please submit your resume and a cover letter outlining your relevant skills and experience. Applications close 5pm, Friday, 30 th October. Prior to applying, please discuss your intent to apply with your leader and take a look at our expression of interest tips. The Senior Cyber GRC Analyst position description is available on the intranet. This role is graded at Individual Contract.

If you have any questions about this opportunity, please contact Chris Yeoh—Cyber Security Governance and Compliance Manager. We are committed to ensuring WorkCover reflects the diversity of the Queensland community. We welcome applications from First Nations peoples, members of the LGBTQIA+SB community, people of all ages, people who are neurodivergent, people with disability, and people from culturally and linguistically diverse backgrounds.

Acceptance of applications submitted after advertising closes is at the discretion of the selection panel. To ensure you have the best and most inclusive experience, please let us know if you require any reasonable adjustments or accommodations to help you confidently showcase your skills and potential. You can contact us at [email protected] or let our recruitment team know during your conversation with them.

Pre-employment checks will be conducted on all prospective employees. This includes a Right to Work in Australia Check, Police Check, Education Check, Reference Check, and where appropriate a Visa Check. The information provided will be treated as confidential in accordance with the Information Privacy Act 2009 (Qld). All permanent appointments are subject to a probationary period in accordance with our police.