Cyber Governance & Assurance Analyst
Sign up free to see how well your resume matches this role.
What you'll do
- Support the development, maintenance, implementation and assurance of cyber security policies, standards, procedures and control frameworks.
- Evaluate cyber security risks, threats, vulnerabilities and control gaps, and support practical treatment plans aligned to business risk and impact.
- Coordinate cyber assurance activities, audits, control assessments and testing, including tracking findings and remediation with relevant owners.
- Develop and maintain scripts, queries, integrations and automated workflows that improve evidence collection, compliance monitoring, control assurance and risk reporting.
- Collaborate with internal teams, State and Territory Associations, suppliers and venues to implement proportionate controls, investigate exceptions and support cyber incident response activities.
What they're looking for
- Relevant experience in cyber security, information technology, governance, risk, compliance, assurance or a related discipline.
- Relevant tertiary qualification, certification or equivalent practical experience in cyber security, IT, governance, risk, compliance, assurance or a related field.
- Strong knowledge of cyber security principles, governance and assurance practices, risk management methodologies and relevant frameworks such as ISO and NIST.
- Practical experience implementing, operating, maintaining or assuring technical and administrative cyber security controls within an established risk management framework.
- Experience improving manual or repeatable processes through practical automation, workflow tools, reporting platforms, queries or integrations that support security operations, assurance, compliance monitoring or risk reporting.
- Ability to analyse security data and control evidence using queries, reporting tools, APIs or automated data-processing techniques.
- Strong stakeholder engagement skills, with the ability to build trusted relationships and influence technical and business teams to achieve security, risk and assurance outcomes.
Nice to have
- Experience with Microsoft security platforms, identity and access management, vulnerability management, endpoint security, workflow automation, integrations or security reporting tools would be highly regarded.
Summarised by NextRaise from the employer’s description, which follows in full below.
Full description from employer
Working for Cricket Australia means that you become a part of Australia’s proud history and help us look toward the future. Our players and teams are successful, inspiring and reflect the values and aspirations of the community they represent. As an organisation, we are seeking to drive bold, transformative change in digital experiences, junior participation, culturally diverse inclusion, gender equality and sustainability, whilst also reimagining the W/BBL, building player connection through storytelling and playing our part in developing the game globally.
Our purpose is clear; to unite and inspire everyone to love and play cricket. Cricket is so much more than just a game; it brings people together and binds us all through our shared experiences.
This is your opportunity to join a purpose led organisation that truly makes a difference to Australians.
Working for Cricket Australia means that you become a part of Australia’s proud history and help us look toward the future. Our players and teams are successful, inspiring and reflect the values and aspirations of the community they represent. As an organisation, we are seeking to drive bold, transformative change in digital experiences, junior participation, culturally diverse inclusion, gender equality and sustainability, whilst also reimagining the W/BBL, building player connection through storytelling and playing our part in developing the game globally.
Our purpose is clear; to unite and inspire everyone to love and play cricket. Cricket is so much more than just a game; it brings people together and binds us all through our shared experiences.
This is your opportunity to join a purpose led organisation that truly makes a difference to Australians.
ABOUT THE ROLE
The Cyber Governance & Assurance Analyst works within the Australian Cricket Cyber Security team to support strong cyber governance, effective risk management, control assurance and compliance across Australian Cricket.
The role combines governance, risk and compliance capability with practical technical skills used to maintain, validate and improve security controls. This includes supporting control implementation, automating evidence collection and assurance activities, and maintaining scripts, code, configuration and technical documentation where appropriate.
As an Australian Cricket role, this position supports the cyber security function for Cricket Australia and member state and territory organisations.
This is an exciting time for us, as we are seeking a Cyber Governance & Assurance Analyst within our Digital & Technology department. This role will play an important part in strengthening cyber governance, risk management, control assurance and compliance across Australian Cricket while supporting practical improvements to security controls. We’re looking for someone to join our Cyber Security team to help maintain cyber policies and standards, assess risks and control gaps, support assurance and audit activities, automate evidence collection and reporting, and work with internal teams, State and Territory Associations and suppliers to improve our cyber resilience. If you are a curious, technically minded and collaborative cyber professional who enjoys turning governance requirements into practical outcomes, we want to hear from you. This is a great opportunity to help protect and enable the digital platforms, services and experiences that support cricket across Australia.
Reporting to the Senior Manager, Cyber Security, you’ll be responsible for:
Support the development, maintenance, implementation and assurance of cyber security policies, standards, procedures and control frameworks.
Evaluate cyber security risks, threats, vulnerabilities and control gaps, and support practical treatment plans aligned to business risk and impact.
Coordinate cyber assurance activities, audits, control assessments and testing, including tracking findings and remediation with relevant owners.
Develop and maintain scripts, queries, integrations and automated workflows that improve evidence collection, compliance monitoring, control assurance and risk reporting.
Collaborate with internal teams, State and Territory Associations, suppliers and venues to implement proportionate controls, investigate exceptions and support cyber incident response activities.
WHO WE ARE LOOKING FOR
Relevant experience in cyber security, information technology, governance, risk, compliance, assurance or a related discipline.
Relevant tertiary qualification, certification or equivalent practical experience in cyber security, IT, governance, risk, compliance, assurance or a related field.
Strong knowledge of cyber security principles, governance and assurance practices, risk management methodologies and relevant frameworks such as ISO and NIST.
Practical experience implementing, operating, maintaining or assuring technical and administrative cyber security controls within an established risk management framework.
Experience improving manual or repeatable processes through practical automation, workflow tools, reporting platforms, queries or integrations that support security operations, assurance, compliance monitoring or risk reporting.
Ability to analyse security data and control evidence using queries, reporting tools, APIs or automated data-processing techniques.
Strong stakeholder engagement skills, with the ability to build trusted relationships and influence technical and business teams to achieve security, risk and assurance outcomes.
Experience with Microsoft security platforms, identity and access management, vulnerability management, endpoint security, workflow automation, integrations or security reporting tools would be highly regarded.
WHAT’S IN IT FOR YOU?
Our employees at Cricket are gifted an additional week of leave at the end of the season! As a CA employee, you will also have other benefits including:
Tickets to the Cricket for you to take your friends and family and experience Australia’s favourite game!
A flexible working environment, meaning we strike the balance of what you need and what works for the business (this isn’t limited to working remotely)
Discounts from our partners such as ASICS and salary packaging options
A multitude of leave types including paid parental leave and volunteer leave
OUR CULTURE
Cricket is a sport for all Australians and our workplace reflects that. We recognise our differences are our strength and a diverse and inclusive workforce is fundamental to our success. We strongly encourage Aboriginal and Torres Strait Islander people, people from culturally and linguistically diverse backgrounds, people of colour, gender, LGBTIQ+ people, people with diverse religious beliefs and people with a disability to apply. Our culture is founded on our values:
Aspire
Respect
Lead together
Australian Cricket, including Cricket Australia, is committed to being a child safe organisation and requires all team members to hold a valid Working with Children Check.
If you need assistance or adjustments to fully participate in the application process, please contact careers@cricket.com.au
Please submit your application via the link by 11:59pm Sunday 4 October. In the meantime, follow us on our socials via Instagram @cricketaustralia, via X @cricketaus and via our website https://www.cricket.com.au/
Company
Company facts come from this company's own listings. We only show what the postings themselves carry.