Cyber Security GRC Analyst

• Conduct cyber risk assessments, control assurance and compliance activities in line with WorkCover's Information Security Management System, regulatory obligations and approved cyber security frameworks.

• Assess the design and operating effectiveness of cyber security controls, documenting findings, evidence, risk implications and recommended improvements.

• Support internal audits and external certification activities by coordinating evidence, validating controls and maintaining accurate and traceable assurance records.

• Partner with technical and business stakeholders to identify cyber risks, control gaps and compliance issues and support sustainable remediation.

• Analyse cyber risk, control and compliance information to develop meaningful reporting and insights that support risk-based decisions.

• Provide practical cyber governance and risk advice and contribute to improvements across policies, standards, frameworks and processes.

• Monitor emerging cyber risks, regulatory requirements and industry developments, and contribute to initiatives that strengthen cyber awareness and risk ownership.

You're an analytical and collaborative cyber professional who enjoys understanding risk, working through complex issues and turning security requirements into practical outcomes. You can communicate clearly with technical and non-technical stakeholders and enjoy working across teams to strengthen cyber security practices.

You'll bring:

• Experience in cyber security, technology risk, security governance or a related discipline within a complex or regulated environment.

• Experience conducting cyber risk assessments and assessing and reporting on the effectiveness of cyber security controls.

• Working knowledge of NIST Cybersecurity Framework, ISO 27001, Essential Eight and IS18, or comparable standards.

• Experience supporting audits, compliance activities, control assurance and remediation of cyber risks and control gaps.

• The ability to interpret regulatory, policy and framework requirements and translate them into practical cyber security controls and governance processes.

• Experience maintaining accurate and auditable cyber risk, control and compliance records within a GRC platform.

• Sound knowledge of cyber security technologies, Microsoft security products and cloud environments such as Azure and AWS.

• Strong analytical, communication and stakeholder engagement skills, with the ability to manage competing priorities and contribute to cross-functional outcomes.

• A tertiary qualification in cyber security, information technology or a related discipline, or equivalent relevant professional experience.

If you're looking to broaden your experience across cyber governance, risk, assurance and compliance while contributing to stronger cyber resilience at WorkCover Queensland, we'd love to hear from you.

Our vision is to be the best workers' compensation insurer, making a positive difference to people's lives and keeping Queenslanders working. At WorkCover, we deliver with heart, own our outcomes, work best together and stay open to what's possible - and we're looking for people who share these values

When you join us, you'll benefit from:

• A purpose‑driven organisation where your work genuinely makes a positive impact on Queenslanders' lives

• A collaborative and supportive team environment that values empathy, trust and working together

• Hybrid work arrangements that support flexibility and work-life balance

• Personalised learning and development opportunities to support your growth and career progression

• A holistic health and wellbeing program designed to support you both professionally and personally

• Industry‑competitive salaries

• A generous superannuation scheme, including co‑contribution

• Study assistance to support ongoing education and professional development

You can find out more about what it's like to work with us by visiting Working at WorkCover Qld .