Cyber Security Compliance & Risk Analyst providing guidance and compliance support for security policies. Identifying risks, ensuring remediation, and collaborating across departments to enhance security effectiveness.
Responsibilities
Contribute to the delivery of an effective Cyber and information security Capability across the organization
Identify and assess risks within your subject matter area, lead risk-related dialogue as the SME for that domain, and support stakeholders in making informed, risk-based decisions
Mitigate risks in delivery while keeping to agreed plan and timeframes
Take personal accountability for identifying security weaknesses and ensuring mitigation to a secure conclusion
Engage across the organization to ensure issues are identified, self-reported, and notified to key stakeholders
Act with integrity and transparency in threat and risk identification and problem solving
Role model the creation and innovation of solutions and threat mitigation strategies
Contribute to the development, execution, and assurance of an effective Cyber practice
Collaborate across departments to avoid security problems manifesting as business problems
Maintain knowledge of relevant regulatory requirements and apply it in all tasks
Monitor regulatory developments and advise on changes to promote awareness
Assist in the preparation of reports and ensure accuracy and completeness for submission
Support the delivery of security compliance and risk services ensuring compliance with appropriate SLAs and quality controls and alignment with security, regulatory, and business requirements
Track security compliance and risk service benefit to specifically identify areas of continuous improvement
Requirements
Bachelor's Degree in cyber security, information security, information technology, management, or business or equivalent combination of education and work experience
Experience with security and risk-based standards such as ISO27001, ISO 31000, NIST 800
Working across time zones and collaborating in a multicultural environment
Helping businesses, partners, and customers become more innovative and fast-paced to improve business agility
Benefits
Hybrid Working – a mix of working from home and in the office
22 weeks of paid leave for family growth, with 12 weeks available to all parents on a gender-equal basis
Competitive 401(k) program with company match up to 8%
Well-being program including holistic wellbeing coaching, gym membership, confidential counselling, financial and legal advice
Tuition Reimbursement for professional certifications, and continuing education
Employee Network and Community – QBE actively supports six Employee Networks, and many ways to give back to your community
Information System Security Officer responsible for cybersecurity assessments and security policy implementation. Working with a diverse team on telecommunication systems to achieve Authority to Operate (ATO).
Target Security Specialist responsible for ensuring guest safety and preventing theft in retail. Engaging with customers to provide a friendly shopping experience while managing security measures.
Security Engineer implementing cloud - native security measures for fintech firm, collaborating closely with the CISO to enhance client trust through robust security infrastructure.
Senior Cybersecurity GRC Associate managing information security governance, risk assessments, and compliance at Corient. Join a team dedicated to supporting high - net - worth individuals in wealth preservation.
Cybersecurity Specialist at Telefónica Tech supporting user access within minimal privilege principles. Ensuring compliance and coordination with internal security processes.
CISO responsible for cybersecurity strategy, operations, and regulatory compliance in leading blockchain ecosystem. Managing risk and fostering security culture within the organization.
Security Engineering Lead at Outset overseeing security policies, compliance, and hands - on security engineering. Collaborating with teams to ensure secure product infrastructure and practices.
Senior Penetration Tester working on TIBER and Red Team assignments in high - security sectors. Collaborate with experts to deliver comprehensive security assessments and enhance organizational security.
Senior Security Delivery Engineer safeguarding digital infrastructure at nbn by embedding security into CI/CD pipelines. Collaborating within DevSecOps teams to ensure resilient platforms.
Senior Cloud Security Engineer at Semperis focusing on preventative security and cloud architecture. Collaborating with teams to enhance security around cloud environments and regulatory requirements.