Senior Information Security Analyst

We are seeking an experienced Information Security Analyst – Security Ops & Risk to strengthen our information security capability across Australia and the broader international business. This is a permanent, full-time and hybrid role, working from home and our National Head Office, South Melbourne. This hands-on role suits someone with strong security operations experience who can operate independently as a key security resource in the business. You will take ownership of security monitoring, vulnerability management, incident response, control improvement and security reporting.

Responsibilities

Take ownership of security monitoring, vulnerability management, incident response, control improvement and security reporting; Investigate security events, coordinate remediation, improve processes, support audits and work with technology, operations and corporate teams to manage security risk in a regulated environment; Monitor, triage and investigate security alerts across SIEM, EDR, network and cloud environments; Coordinate security incidents, including investigation, escalation, documentation, containment and post-incident review; Own vulnerability management activities, including scanning, prioritisation, remediation tracking and reporting; Review security controls across cloud, endpoint, network and application environments; Support penetration testing, external assessments and remediation planning; Improve detection, response and reporting capability across security tools and processes; Maintain security documentation, incident reports, risk records and audit evidence; Partner with IT, engineering, operations and external vendors to reduce security risk; Support compliance, governance and audit activities across a regulated technology environment; Contribute to the maturity of security practices, processes, standards and controls

Requirements

SIEM, EDR, IDS/IPS, vulnerability scanning and incident response tools; Cloud security exposure across AWS, Azure or similar environments; Understanding of IOCs, MITRE ATT&CK, phishing, malware and common attack techniques; Familiarity with security frameworks such as Essential Eight, ISO 27001, NIST CSF or similar; Experienced security operations professional who can operate independently as a trusted security resource in the business; Hands-on experience across security monitoring, incident response, vulnerability management and control improvement; Accountable, analytical and calm under pressure; Clear communication skills and confidence to work effectively with technical and non-technical stakeholders