Senior Security Analyst\Officer

About the role

The Senior Security Analyst plays a key role in protecting and governing Keyek in accordance with its security controls, risk appetite and compliance obligations. The role requires a high degree of autonomy to assess security risks, recommend corrective action and help maintain a resilient security program. This role assesses the people, technology and process elements of Keyek's technology and security environment. It identifies control gaps and works with relevant stakeholders to agree and implement appropriate remediation plans. The role also monitors emerging developments and assesses the organisation's readiness to respond. The role reports to the Chief Security Officer.

Key responsibilities

• Provide pragmatic, risk-based security advice to teams that supports Keyek's security objectives and operating requirements
• Work with engineering, IT, product and operations teams to embed security requirements into systems, products, workflows and governance processes
• Maintain an AWS based cloud security posture to ensure it remains secure and any changes and behaviours are identified and responded to
• Monitor emerging threats and changes in the operating environment, then recommend adjustments to security and technology controls where required
• Support and govern vulnerability management, security assessments, remediation tracking, audit evidence collection and compliance reporting
• Monitor ICT systems, cloud platforms (AWS, Azure), endpoint security tools, network activity and security logs to identify suspicious activity and potential cyber security incidents
• Triage security alerts, investigate incidents, document findings and support containment, remediation and escalation activities in a timely and structured manner
• Prepare policies, procedures, assessment records, registers, and audit artefacts
• Support continuous improvement against relevant security frameworks and baselines, including ISO/IEC 27001, the NIST Cybersecurity Framework and the Australian Essential Eight
• Document, implement and maintain physical security controls across all sites

About you

• Strong understanding of the security objectives to safeguard the organisation from both internal and external threats and risks
• Sound knowledge of key cyber security frameworks and certification programs (ISO27K, ASD, DISP, SCO 2, NIST)
• Independent thinker but a team player
• Ability to influence others and improve security awareness and culture across the organisation
• Knowledge of AI technologies and AI as a threat vector for information and data security
• Ability to lead initiatives, work with minimal supervision and coordinate stakeholders to achieve agreed outcomes
• Ability to assess systems, applications and environments and promote remediation and recommendations to increase the resilience of those
• Ability to maintain and automate control validations using widely known compliance and governance platforms (Ex- Vanata, Drata)
• Hands-on experience across technical security and security governance
• Professional judgement, attention to detail and a continuous improvement mindset suitable for a high-assurance identity security environment

About us

Keyek is an Australian identity assurance company focused on delivering secure, hardware-anchored identity solutions for government, defence and enterprise customers. The company's approach is built around providing indisputable proof of identity across users, devices, systems and data, with security anchored in Hardware Security Module technology and designed to support high-assurance authentication and authorisation across complex operating environments. Keyek's security model emphasises sovereign design, hardware-protected credentials, enterprise-wide identity certainty and practical security that supports operational growth without adding unnecessary user friction.