Senior Security Analyst (GRC) in Melbourne

Davidson is the proud recruitment partner of SEC Victoria as they accelerate Victoria's renewable energy transition. Do work that makes a difference. Join an organisation who's making a real difference to Victoria's energy future. SEC's passionate people are working to support the transition to renewable energy and delivering affordable, reliable, renewable energy for all Victorians. SEC offers hybrid working with offices in Melbourne's CBD and Morwell.

What your day could look like:

• Partner with teams across Technology & Data and the broader SEC to strengthen cyber resilience and support critical business initiatives.
• Take ownership of security controls & compliance assurance, ensuring security controls remain effective, aligned to ISO/IEC 27001 and key regulatory obligations.
• Work closely with control owners to assess maturity, address gaps and support audits.
• Lead technology risk governance & advisory, facilitating risk discussions, maintaining the technology risk landscape and translating complex security issues into clear business decisions for leaders and stakeholders.
• Play a key role in security engagement, awareness & change enablement, acting as a trusted advisor across projects and transformation initiatives.
• Support new technology capabilities, drive security awareness across the workforce or help teams implement practical risk treatments.

What you need to be successful:

• Deep experience in cyber security governance, risk and compliance, with the ability to balance strong security outcomes with practical business needs.
• Comfortable operating in a complex stakeholder environment, translating technical security concepts into meaningful business risks and actions.
• Build trusted relationships across teams and take ownership from identifying an issue through to implementing a sustainable solution.
• Experience working with security controls frameworks, technology risk management and assurance activities.
• Demonstrated expertise in cyber security governance, risk and compliance, including hands‐on experience with ISO/IEC 27001‐aligned controls frameworks, risk assessments, assurance activities and remediation management.
• Proven ability to manage technology or cyber risks throughout their lifecycle, leveraging GRC platforms, facilitating stakeholder discussions and providing clear, actionable reporting to business and technology leaders.
• Experience building and/or administering a controls library, including conducting control assessments, managing evidence, identifying gaps and driving remediation activities to improve security effectiveness and compliance outcomes.

What is it like to work at SEC?

Join a team of passionate, purpose-driven people who care about the work they do and the people they work with. At SEC, our collaborative and inclusive culture means you'll enjoy working beside people who celebrate each other's achievements. You'll also do meaningful work, build great relationships, and help shape Victoria's energy future. SEC offers flexible working options designed to support individual circumstances.

We strongly encourage applications from Aboriginal and Torres Strait Islander people. We are also deeply committed to building an inclusive workplace that embraces diversity and people with disability, people from the LGBTIQ community, and people from culturally diverse backgrounds. SEC strives to create a respectful and collaborative workplace culture that allows all employees to thrive.

Applicants must be an Australian citizen, permanent resident or hold a valid work permit to be eligible to apply.

To receive this information in an accessible format (such as large print or audio) or if you require any reasonable adjustments during the recruitment process, please reach out to SECRecruitment@davidsonwp.com