Cyber Security (GRC) Analyst

Adactin Group is a 100% Australian-owned global IT consulting company, headquartered in Sydney. We are a trusted technology partner helping organizations drive end-to-end digital transformation through our deep expertise in Microsoft and AWS ecosystems, AI-powered Digital Engineering, and future-ready Quality Assurance.Our managed delivery approach, backed by domain expertise, ensures successful outcomes for every project. At Adactin, we believe in the power of our people. We foster a dynamic and supportive environment where your career can grow alongside exciting projects that shape the future of technology. Join us, and be part of a team committed to innovation, excellence, and making a differenceJob Overview:
We are looking for a Cyber Security & GRC Analyst with 2+ years of experience in Cyber Security and Governance, Risk & Compliance (GRC). The role involves providing cyber security advisory services, assessing compliance against security standards, identifying risks, and supporting both operational and project-based cyber security initiatives.Australian Citizenship is mandatory for this role.Key Responsibilities:Provide cyber security advisory support to business and technical stakeholders on security policies, standards, guidelines, patterns, and industry frameworksReview and assess proposed IT changes, solution designs, and technology implementations to ensure alignment with cyber security policies and standardsIdentify, assess, document, and communicate cyber security risks arising from non-compliance or security gapsConduct security assessments of third-party vendors, suppliers, and engagement models to ensure compliance with organisational cyber security standardsAnalyse and report cyber security risks associated with vendor onboarding, integrations, and external engagementsSupport triage and management of cyber security activities arising from operational support and project engagementsWork closely with infrastructure, application, architecture, and project teams to ensure security requirements are embedded throughout deliveryAssist in maintaining compliance with organisational and regulatory security requirementsContribute to risk assessments, governance documentation, audit activities, and remediation trackingSupport continuous improvement initiatives related to cyber governance and risk management processesKey Skills & Experience:Minimum 2+ years of experience in Cyber Security and/or GRC-related rolesStrong understanding of cyber security governance, risk, and compliance principlesKnowledge of cyber security frameworks, policies, standards, and best practicesExperience assessing IT solutions, infrastructure changes, or application designs from a security perspectiveExposure to third-party/vendor security assessments and risk evaluationsAbility to identify and communicate cyber security risks clearly to both technical and non-technical stakeholdersStrong analytical, documentation, and stakeholder management skillsAbility to work across multiple operational and project-based activities simultaneouslyNice to Have:Exposure to Australian Government or enterprise security environmentsFamiliarity with frameworks such as ISO 27001, NIST, Essential Eight, or CIS ControlsRelevant certifications such as Security+, ISO 27001, or similar.Strong GRC skills and experienceIf possible, experience with the PSPF and ISM