Cyber Security (GRC) Analyst

About this role

Adactin Group is a 100% Australian-owned global IT consulting company, headquartered in Sydney. We are a trusted technology partner helping organizations drive end-to-end digital transformation through our deep expertise in Microsoft and AWS ecosystems, AI-powered Digital Engineering, and future-ready Quality Assurance.

Our managed delivery approach, backed by domain expertise, ensures successful outcomes for every project. At Adactin, we believe in the power of our people. We foster a dynamic and supportive environment where your career can grow alongside exciting projects that shape the future of technology. Join us, and be part of a team committed to innovation, excellence, and making a difference

Job Overview

We are looking for a Cyber Security & GRC Analyst with 2+ years of experience in Cyber Security and Governance, Risk & Compliance (GRC). The role involves providing cyber security advisory services, assessing compliance against security standards, identifying risks, and supporting both operational and project-based cyber security initiatives.

Australian Citizenship is mandatory for this role.

Key Responsibilities

• Provide cyber security advisory support to business and technical stakeholders on security policies, standards, guidelines, patterns, and industry frameworks
• Review and assess proposed IT changes, solution designs, and technology implementations to ensure alignment with cyber security policies and standards
• Identify, assess, document, and communicate cyber security risks arising from non-compliance or security gaps
• Conduct security assessments of third-party vendors, suppliers, and engagement models to ensure compliance with organisational cyber security standards
• Analyse and report cyber security risks associated with vendor onboarding, integrations, and external engagements
• Support triage and management of cyber security activities arising from operational support and project engagements
• Work closely with infrastructure, application, architecture, and project teams to ensure security requirements are embedded throughout delivery
• Assist in maintaining compliance with organisational and regulatory security requirements
• Contribute to risk assessments, governance documentation, audit activities, and remediation tracking
• Support continuous improvement initiatives related to cyber governance and risk management processes

Key Skills & Experience

• Minimum 2+ years of experience in Cyber Security and/or GRC-related roles
• Strong understanding of cyber security governance, risk, and compliance principles
• Knowledge of cyber security frameworks, policies, standards, and best practices
• Experience assessing IT solutions, infrastructure changes, or application designs from a security perspective
• Exposure to third-party/vendor security assessments and risk evaluations
• Ability to identify and communicate cyber security risks clearly to both technical and non-technical stakeholders
• Strong analytical, documentation, and stakeholder management skills
• Ability to work across multiple operational and project-based activities simultaneously

Nice to Have

• Exposure to Australian Government or enterprise security environments
• Familiarity with frameworks such as ISO 27001, NIST, Essential Eight, or CIS Controls
• Relevant certifications such as Security+, ISO 27001, or similar.
• Strong GRC skills and experience
• If possible, experience with the PSPF and ISM

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.