Specialist Analyst Cyber and Digital Risk

There’s No Us Without U. Care with Us, for Today and Tomorrow

There's no life without water, and at Urban Utilities, we live and breathe that knowledge every single day. Our passion drives us to leverage digital innovation and technology to revolutionise the water industry. Join us in shaping our digital future, making a lasting impact, and transforming our teams. And it's why we need people like YOU. Come and shape our future with us and make a real and lasting impact across our teams.

Your opportunity:

Our Cyber Security and Digital Performance team are seeking a Specialist Analyst Cyber and Digital Risk to join their team. If you have a passion for cyber security, digital risk assessment, and risk-based decision-making we encourage you to apply.

As a Specialist Analyst within our Cyber Security & Digital Risk team, you will provide expertise and consultancy to internal clients across Urban Utilities in the identification, assessment and mitigation of cyber security and digital risks. In this role you will be responsible for cyber security subject expertise, risk expertise, and defining cyber security and digital controls in both the information technology and operational technology domains.

The role will be involved in projects, vendor assessments, vulnerability assessments, risk management, technology resilience and compliance activities.

Key Responsibilities:

• Cyber Security and Digital Control Standards: Oversee all cyber security and digital controls across IT and OT environments, and assist in the management of controls across the organisations technology stack.
• Risk & Vulnerability Management: Conduct risk assessments, advise on gaps and manage uplift to security controls, identify and act on vulnerabilities, and ensure cybersecurity assurance and accreditation.
• Disaster Recovery & Continuity Planning: Develop, maintain, and test disaster recovery and business continuity procedures, and assist in running cyber security testing exercises.
• Advisory & Consultancy: Provide guidance on cybersecurity strategies, design, and maintenance to operational programs and projects within the branch and across the organisation.
• Awareness & Collaboration: Facilitate security awareness programs and work with business units to implement best practices.

About you:

• Cybersecurity GRC Experience: 2+ years in governance, risk, and compliance roles.
• Operational Technology (OT) Knowledge: Expertise in OT environments and understanding of technology stacks.
• Risk Assessment & Stakeholder Engagement: Confident in conducting risk assessments and educating stakeholders.
• Regulatory & Industry Expertise: Experience in Critical Infrastructure, Utilities, and regulatory frameworks in Australia.
• Analytical & Problem-Solving Skills: Strong critical thinking, problem-solving, and adaptability.
• Technical & Security Advisory: Ability to communicate security responsibilities and advise technical teams.
• Cybersecurity Frameworks & Compliance: Familiarity with industry standards and best practices (e.g. E8, ISO 27001, NIST-CSF, AESCSF etc.).
• Communication & Leadership: Ability to articulate security and risk matters at all levels of the organisation.
• Collaboration & Customer Focus: Works well in cross-functional teams with a strategic, customer-centric mindset.
• Adaptability & Decision-Making: Agile, proactive, and able to prioritise effectively in a dynamic environment.
• Security Requirements: Security clearance/SOCI requirements may apply, depending on the role and responsibilities.
• Desirable Certifications: CISSP, CISM, CompTIA Security+, SSCP, or experience with security audits and implementation.

Performance of ‘on call’ duties are an inherent requirement of this role. This requires that the employee must be available to be on-call and to attend to work matters, both in person and remotely, outside of normal working hours, including evenings, weekends and public holidays, as reasonably required to fulfill the requirements of the position. The days, times, duration and frequency of on call arrangements may be subject to change, including at short notice, as required by Urban Utilities’ operational needs as applying from time to time. At all times whilst on-call, you must be fit for duty, contactable, and able to respond, including the ability to physically attend if required, to the operational needs of the business within a reasonable timeframe and in a safe manner.

At UU, we celebrate diversity. We genuinely believe that bringing together diversity of thoughts, perspectives and expressions is key and crucial to our success as a business. You might find you meet some, but not all, of the job requirements for this role. We’d still encourage you to apply as we we’re looking for the right human being for this role - it’s about so much more than ticking all the boxes!

Why Urban Utilities?

At Urban Utilities, the work we do is about so much more than the bottom line. We're a leading provider of world-class drinking water and wastewater services to the vibrant communities of Brisbane, Ipswich, Lockyer Valley, Somerset, and Scenic Rim. As we continue to grow, we're committed to planning ahead and shaping a sustainable future around water for generations to come.

At the core of our work lies genuine care: for our team, our customers, communities, and the environment. From the flush of a toilet to major infrastructure projects and residential developments, we're dedicated to being there every step of the way.

Our HQ is in Fortitude Valley, Brisbane, but you'll find us all over SEQ - working in cool places like the SAS Laboratory in Darra, field-based depots in Eagle Farm, Acacia Ridge, Bundamba, and wastewater treatment plants dotted across the region.

We know the chance to thrive, and progress comes hand in hand with the support to balance work with life. So, you’ll access an increasingly diverse range of benefits and initiatives that’ll help you bring the best you. Speaking of which, here’s just a sample of the benefits we offer our team:

• Flexibility at UU depends on the type of work you do but could include options such as, 9-day fortnights and flexible days. Talk to us about what flexibility means to you!
• 18 weeks of paid parental leave, 15 days personal leave including two proactive wellbeing days, and an additional day of leave each year to connect with friends and family
• Generous Salary Packaging options, including novated leases
• Corporate discounts across Health insurance, technology and more
• Urban Utilities is an endorsed employer for all women. See our range of benefits and policies directly at WORK180

Visit our website to learn more about us at www.urbanutilities.com.au

How to apply