Cyber Governance & Risk Analyst

About this role

• Seeking an experienced Cyber Governance & Risk Analyst
• Full-time, fixed-term position (until 2029) based at our Hawthorn campus
• Hew 7 salary + 17% super and staff benefit

We have an exciting opportunity for a Cyber Governance & Risk Analyst to join Swinburne's Cyber Security team.

As an integral part of the Cyber Security team, you will help strengthen the University's cyber resilience by delivering pragmatic, business-focused security and risk services across a range of strategic initiatives.

Working closely with stakeholders across the University, you will lead third-party vendor risk assessments, conduct solution risk reviews, coordinate penetration testing activities, and provide expert guidance on cybersecurity governance and risk management. Your ability to identify and mitigate security risks will play a key role in protecting Swinburne's digital environment and supporting secure innovation.

This an exciting opportunity to make a tangible impact while helping shape a secure and resilient future for the University.

About You

To be suitable for this role you will need to have experience in the below key accountabilities:

• Perform security assessments of third-party vendors to evaluate their compliance with organizational security requirements.
• Review and analyze vendor security documentation, including SOC reports and ISO certifications, and other compliance evidence.
• Identify risks associated with third-party services and collaborate with stakeholders to mitigate them. Produce Risk Assessment documentation.
• Conduct security risk assessments for proposed IT and business solutions to ensure alignment with organizational security standards and regulatory requirements.
• Work closely with project teams to identify potential security risks in new or modified applications, systems, or services.
• Serve as the central point of contact for coordinating penetration testing activities for new projects.
• Liaise with internal teams, external vendors, and testing partners to define scope, schedule, and objectives of penetration tests.
• Assess, evaluate and make recommendations to management regarding the adequacy of existing security controls and perform security assessments for new and proposed initiatives.

For more information, please refer to the attached position description.

Qualifications

• Education: Bachelor’s degree in Cybersecurity, Information Technology, Business, or related field (or equivalent experience).
• Certifications:
• Preferred: CISSP, CISA, CRISC, or similar certifications.
• Bonus: Specific certifications in vendor risk management or penetration testing (e.g., CPRA, OSCP).

About Swinburne University Of Technology

Swinburne’s strategy draws upon our understanding of future challenges. We choose to build Swinburne as the prototype of a new and different university – one that is truly of Technology, of Innovation and of Entrepreneurship. We are committed to a differentiated university proposition in education and research.

Our Ad Astra strategy is the cornerstone of Swinburne’s bold ambition to lead globally in technology-driven education and research. This strategy positions us to create transformative solutions, empower learners, and partner with industry to thrive in an ever-changing world.

What We Offer You!

• Work your way with flexible working arrangements, including hybrid options and generous parental leave to support a balanced lifestyle.
• Exclusive staff discounts, including discounted Medibank health insurance, 50% off Swinburne courses and other partner offers.
• Swinburne offers 17% super and salary packaging options, including car leasing and extra super contributions.

Want to learn more? Head over to our benefits page!

To Apply

Please submit your CV and cover letter addressing the Key Selection Criteria and your suitability for this position.

To review the Position Description and to apply, please scroll down to the bottom of the page.

If you are viewing this advert from an external site, please click ‘apply’ and you will be redirected to Swinburne’s Jobs website to access the Position Description at the bottom of the page.

Please Note: Appointment to this position is subject to passing a Working with Children Check.

If you are experiencing technical difficulties with your application, please contact the Talent Acquisition team at talentacquisition@swin.edu.au

Applications Close: Sunday 23 August 2026, 11pm

Swinburne offers flexible working options contained in our leave and parenting/carer policies to support work-life balance.

Diversity, Equity and Inclusion

Swinburne has become a world-class university, driving social and economic impacts through science, technology, and innovation. As a dual-sector university, our vision is for people and technology working together to build a better world.

Central to our vision is our commitment to diversity, equity, and inclusion. We pride ourselves on being an equal opportunity employer focused on attracting, retaining, and developing great talent. We work to remove barriers related to gender identity, culture, ethnicity, sexual orientation, disability, and age.

Swinburne is proud to be recognised as an AWEI Gold Employer, reflecting our commitment to creating an inclusive workplace where LGBTQIA+ employees, students and communities can thrive.

We strongly encourage applicants from diverse Aboriginal and Torres Strait Islander communities. Our Moondani Toombadool Centre leads our Indigenous education and culture at Swinburne, guided by community wisdom and leadership.

We support applicants with disabilities, and reasonable adjustments can be requested at any stage of the recruitment process.

For reasonable adjustment requests - including accessible formats of the position description, application form, or other documents, please contact talentacquisition@swin.edu.au or call +61 3 9214 3550. Please note: this phone number is for disability and reasonable adjustment enquiries only. General enquiries about the role can also be emailed to talentacquisition@swin.edu.au.

Victoria’s Commitment to Action: Improving international student employment outcomes.

As a signatory to Victoria’s Commitment to Action, Swinburne seeks to remove barriers to international graduate employment. We welcome and encourage applications from international graduates.

As a Circle Back Initiative Employer, we commit to responding to every applicant.

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.