IT Security and Compliance Analyst

Salary: $140,000 including Super

Are you a cyber security professional who enjoys balancing governance, risk, compliance, and hands-on operational security? Do you want to play a key role in strengthening security capability within a leading national professional services organisation?

We are partnering with a well-established and highly regarded professional services firm to recruit an IT Security & Compliance Analyst to join their Sydney team. This is an excellent opportunity for a security professional looking to broaden their experience across security operations, risk management, compliance, reporting, business continuity, and security awareness initiatives.

Working within a collaborative and supportive technology team, you'll be instrumental in enhancing security practices, supporting regulatory compliance, and driving continuous improvement across the business.

The opportunity

As the IT Security & Compliance Analyst, you will contribute to the development, implementation, and ongoing improvement of the organisation's cyber security and compliance framework.

This role offers exposure to a broad range of security disciplines and the opportunity to work closely with stakeholders across multiple national offices.

Key responsibilities

Governance & security frameworks

• Support the ongoing development and enhancement of information security services;
• Assist with developing and maintaining cyber security policies, standards, and procedures; and
• Contribute to governance initiatives and continuous improvement programs.

Security operations

• Monitor and respond to cyber security incidents and alerts;
• Support vulnerability and risk management activities;
• Assist with business continuity planning (BCP) and disaster recovery (DR) testing; and
• Track emerging security threats, trends, and industry developments.

Compliance & risk

• Conduct compliance reviews and gap assessments against regulatory and industry requirements;
• Support alignment with recognised security frameworks such as ISO 27001 and NIST CSF;
• Assist with third-party security assessments and due diligence activities;
• Participate in security audits and remediation activities; and
• Review and assess information security risks across the business.

Reporting & security awareness

• Prepare security reports, dashboards, and KPI/KRI reporting for management;
• Support the delivery of cyber security awareness initiatives;
• Contribute to developing security training materials and programs; and
• Provide guidance to stakeholders on security-related matters.

Technical security support

• Provide cyber security input into technology projects and operational processes;
• Support identity and access management activities;
• Assist with security configuration and management of business applications; and
• Provide security-focused advice across infrastructure, applications, and services.

About you

We're looking for a proactive and motivated cyber security professional who combines strong technical understanding with excellent communication and stakeholder engagement skills.

Required skills & experience

• Bachelor's degree in Cyber Security, Information Security, Information Technology, or related discipline;
• Approximately 3-4 years' experience in a cyber security, information security, GRC, or compliance-focused role;
• Strong understanding of cyber security frameworks and standards including ISO 27001 and/or NIST CSF;
• Experience with Microsoft Entra ID (Azure AD), MFA, and identity management;
• Experience with Microsoft Intune or similar endpoint management platforms;
• Exposure to cyber security risk assessments, audits, and compliance activities;
• Ability to interpret technical information and communicate it clearly to non-technical stakeholders; and
• Strong organisational skills with the ability to manage competing priorities.

Highly regarded

• Previous experience within a legal, professional services, financial services, or similarly regulated environment;
• Experience developing training programs and security awareness initiatives; and
• Familiarity with business continuity and disaster recovery planning.

Apply now or contact us for a confidential discussion.

How to Apply

For more information or a confidential discussion please click to reveal the contact detail for Yomna Elsayed at u&u on 02 8825 6614 quoting reference number 45323.

At u&u Recruitment Partners, we value diversity, equity and inclusion. We welcome applications from Aboriginal and Torres Strait Islander people, people with diverse cultural and linguistic backgrounds and people with disability.

Should you require reasonable adjustments or have a preferred method of communication throughout the recruitment process, we encourage you to make a request via adjustments@uandu.com or contact u&u on 02 8245 7900 to discuss. In response to these requests, we will collaborate closely with you to implement the appropriate adjustments.

Additionally, for a barrier-free and inclusive online experience, you can access u&u’s opportunities using accessibility software Recite Me at https://www.uandu.com/jobs.

Please submit your resume in Word format only.