Senior IT Cyber Governance, Risk and Compliance Analyst

Title: Senior IT Cyber Governance, Risk and Compliance Analyst

Location: Sydney Australia

Full time

Job Description:

• Hybrid work environment

• Permanent Role with the Reserve Bank of Australia

• Play an important part shaping the future of our iconic Australian institution.

About the Role

The Reserve Bank of Australia (RBA) is seeking a Senior Cyber GRC Analyst to join our Cyber Risk and Compliance on a permanent basis. This is a unique opportunity to contribute to the Bank's mission by proactively identifying, assessing, and managing cybersecurity risks, ensuring compliance with regulatory requirements and industry standards.

In this role, you will partner with Line 1 business units and collaborate with Risk Management (Line 2) to deliver accurate and timely cyber risk reporting. You'll help maintain alignment with the Bank's enterprise risk management framework under the 'Three Lines of Accountability' (3LoA) model and ensure compliance with standards such as CPS 234, ISO 27001, and the ACSC Top 37.

Reporting to the Manager, Cyber Risk and Compliance, you will be part of a multi-disciplinary IT Cyber function and responsible for:

• Partnering with business units and Line 2 stakeholders to strengthen cyber risk management practices in line with the Bank's 3LoA model.

• Identifying and anticipating cyber risk and compliance challenges aligned with strategic and operational objectives.

• Conducting third-party cyber risk assessments and providing ongoing assurance based on vendor risk profiles.

• Maintaining and updating the cyber risk & control library and taxonomy, including mapping to frameworks such as Top 37, Essential Eight (E8), and NIST CSF.

• Aggregating system-level risks and issues for departmental and enterprise reporting.

• Supporting internal and external audits (e.g., SWIFT CSP, ISO 27001, CPS 234).

• Coordinating and executing cyber audit activities across the Bank.

• Driving cyber operational resilience by supporting Business Impact Analysis and Business Continuity Planning reviews, and cyber operational risk assurance activities.

• Maintaining and reporting on risk scenarios, Bowtie analyses, and risk profiles for both Line 1 and Line 2 departments.

• Applying deep understanding of risk and compliance frameworks, preferably within central banking or financial services.

• Leading and coordinating cyber control testing activities in line with the Risk and Compliance Management Framework.

• Developing and embedding an automated approach to cyber control assurance, improving efficiency and effectiveness.

The successful candidate will also be required to undertake an AGSVA 'Baseline' security clearance.

About You

You are passionate about cybersecurity, risk, and compliance, and enjoy sharing that passion with others. You bring a collaborative mindset and a strong ability to influence stakeholders across the RBA. To be successful in this critical role you will possess the following skills:

• At least 3 years of experience in a dedicated cybersecurity role, with a focus on risk and compliance.

• Extensive experience in cyber control testing, including the design and implementation of automated control assurance techniques.

• Strong understanding of enterprise risk management frameworks, 3LoA model and regulatory standards.

• Proven ability to engage and influence stakeholders across Lines 1 and 2.

• Familiarity with cyber control frameworks and enterprise risk reporting tools.

• Experience with Business Continuity Management and cyber risk assurance in complex operational environments.

• Experience with third-party risk management and audit coordination.

Highly Desirable

• Experience in cyber risk and compliance roles within financial services or central banking.

Be More

Working for an organisation that truly makes a difference to the people of Australia, we can offer development and career opportunities in a collaborative environment that supports your growth, wellbeing and promotes flexibility. Your individual growth and success drives the RBA forward as an organisation. Be more means you can do more, for yourself and for Australia.

Why RBA?

The RBA makes an important contribution to the Australian economy through the pursuit of national economic policy objectives and associated activities in financial markets and banking. We also issue Australia's banknotes and operate infrastructure critical to the payments system, all of which contribute to the welfare of the Australian people. Made up of specialists across a wide range of fields, our people, values, and culture play a critical role in achieving our objectives.

Our people conduct themselves with a high degree of integrity, while striving for excellence in the work they perform and the outcomes they achieve. We encourage intelligent inquiry, and we treat one another with respect while promoting the public interest through our efforts. We know it is the growth and success of our people that drives the RBA forward.

The Reserve Bank of Australia is committed to equity, diversity and inclusion through key initiatives. We welcome and encourage applicants from diverse backgrounds to apply, including Aboriginal and Torres Strait Islander peoples, culturally and linguistically diverse.