About Company
Thriving in today’s dynamic digital landscape demands vigilant protection and forward-thinking strategies. Career.zycto is a pioneering force committed to fostering innovation while safeguarding our critical information assets. We empower our teams to tackle complex challenges, driving a culture of continuous improvement and resilience. For a sharp-minded IT Risk Analyst, this means an unparalleled opportunity to shape robust security frameworks, influence strategic decisions, and contribute to a secure future. Join us and leverage your expertise in an environment that values strategic insight and proactive risk management, making a tangible impact from day one in Brisbane.
Job Description
Are you a meticulous and proactive IT risk professional with a passion for safeguarding digital assets and ensuring operational resilience? Career.zycto is seeking a dedicated and experienced IT Risk Analyst to join our dynamic team in Sunnybank, Brisbane. In an increasingly complex threat landscape, your expertise will be instrumental in identifying, assessing, and mitigating information technology risks across our diverse portfolio. This isn’t just about compliance; it’s about embedding a robust risk-aware culture, protecting our data, and ensuring the continuity of our services. You will play a pivotal role in developing, implementing, and monitoring our IT risk management framework, collaborating closely with various departments to translate complex technical risks into clear business implications. This role offers an exciting opportunity to drive continuous improvement in our IT governance, risk, and compliance posture, contributing directly to our strategic objectives and overall organizational security. We are looking for an individual who can not only identify potential threats but also propose practical, effective solutions, becoming a trusted advisor in all matters of IT risk.
Key Responsibilities
- Conduct comprehensive IT risk assessments, identifying potential vulnerabilities, threats, and their potential impact on business operations and information assets.
- Develop, implement, and maintain IT risk management frameworks, policies, and procedures in alignment with industry best practices (e.g., NIST, ISO 27001, COBIT).
- Collaborate with IT and business units to design and implement effective risk mitigation strategies and controls, ensuring they are practical and sustainable.
- Monitor the effectiveness of existing IT controls and risk mitigation activities, providing regular reporting on the overall IT risk posture to senior management.
- Ensure ongoing compliance with relevant regulatory requirements, internal policies, and external standards pertaining to information security and data privacy.
- Assist in the development and review of IT security policies, standards, and guidelines, ensuring they remain current and effective.
- Facilitate and support internal and external audits related to IT security and risk, helping to address findings and recommendations.
- Provide expert advice and guidance on IT risk-related matters to project teams and operational staff.
- Drive awareness and training initiatives to foster a strong risk-aware culture across the organization.
- Investigate and analyze IT security incidents, identifying root causes and recommending preventative measures.
Required Skills
- Proven experience in IT risk management, information security, or IT audit.
- Solid understanding of IT risk assessment methodologies and frameworks (e.g., ISO 27001, NIST, COBIT).
- Strong analytical and problem-solving skills with meticulous attention to detail.
- Excellent written and verbal communication skills, with the ability to articulate complex technical risks to non-technical stakeholders.
- Proficiency in data analysis and reporting tools.
- Ability to work independently and collaboratively within a team environment.
- Knowledge of current information security threats, vulnerabilities, and countermeasures.
- Experience with Governance, Risk, and Compliance (GRC) tools.
Preferred Qualifications
- Relevant industry certifications such as CRISC, CISM, CISSP, CompTIA Security+.
- Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field.
- Experience with cloud security risks and controls (AWS, Azure, GCP).
- Familiarity with project management methodologies.
- Prior experience in financial services or similarly regulated industries.
Perks & Benefits
- Competitive salary and performance-based bonuses.
- Comprehensive health and wellness programs.
- Generous professional development and training budget.
- Modern, collaborative office environment in Sunnybank.
- Flexible work arrangements to support work-life balance.
- Opportunities for career growth and advancement.
- Employee assistance program.
- Team social events and recognition programs.
How to Apply
To embark on this exciting journey with Career.zycto, please submit your detailed resume and a compelling cover letter outlining your relevant experience and why you are the ideal candidate for this role. Kindly click on the application link below to apply for the job directly.
