Senior Cyber Security Analyst | 12-Month Contract | Sydney
An exciting opportunity is available for an experienced Senior Cyber Security Analyst to join a large, complex enterprise environment and play a key role in strengthening cyber resilience.
This 12-month contract, based in Sydney with hybrid working, will focus on vulnerability management, security posture, CIS compliance and risk-based remediation.
The role
Working across cyber security, infrastructure, technology, architecture, risk and audit teams, you will identify vulnerabilities, assess cyber risk and help drive remediation across a complex technology environment.
A key focus of the position will be configuring and tailoring CIS Benchmarks and compliance policies to organisational requirements, rather than simply relying on out-of-the-box controls.
Key responsibilities
- Conduct vulnerability assessments, security posture reviews and compliance monitoring.
- Configure, run and interpret CIS Benchmark compliance scans within vulnerability management tooling.
- Customise CIS Benchmarks and compliance policies, including checks, exclusions, thresholds and policy settings.
- Apply risk-based vulnerability prioritisation using factors such as exploitability, threat intelligence and asset criticality.
- Work with technical and business stakeholders to drive vulnerability remediation and cyber risk reduction.
- Provide expertise around secure configuration, system hardening and security control effectiveness.
- Support compliance assessments, audits, control assurance and cyber risk activities.
- Produce reporting, metrics and insights to support cyber risk management and decision-making.
- Drive continuous improvement across vulnerability and security posture management.
About you
We're looking for an experienced cyber security professional who combines strong hands-on technical capability with excellent stakeholder engagement skills.
You will bring:
- Strong hands-on vulnerability management and remediation experience within complex enterprise environments.
- Practical experience using Tenable, Qualys, Rapid7 or an equivalent vulnerability management platform.
- Demonstrated experience customising CIS Benchmarks and compliance policies to meet organisational requirements.
- Hands-on experience configuring, running and interpreting CIS Benchmark compliance scans.
- Experience with risk-based vulnerability prioritisation, including exploitability, threat intelligence and asset criticality.
- Experience across security posture management, exposure management or attack surface management.
- Knowledge of secure configuration standards and system hardening.
- Experience supporting compliance assessments, audits, control assurance and cyber risk activities.
- Strong stakeholder engagement and communication skills, with the ability to influence technical and business teams.
- The ability to manage competing priorities, drive remediation outcomes and clearly communicate cyber risks and recommendations.
Highly regarded
- Knowledge of the Essential Eight, ASD ISM, NIST CSF and CIS Benchmarks.
- Experience with Microsoft Defender, Microsoft Sentinel or similar enterprise security platforms.
- Certifications such as CISSP, CISM, CRISC or GIAC.
- Tertiary qualifications in Cyber Security, IT, Computer Science or a related field.
What's on offer?
- 12-month contract
- Sydney location
- Hybrid working
- Opportunity to work within a large and complex enterprise technology environment
- Highly technical role with a strong focus on vulnerability, exposure and security posture management
- Opportunity to influence remediation and cyber risk reduction across multiple technology teams
If you have strong vulnerability management experience and enjoy combining hands-on security expertise with stakeholder engagement and risk-based remediation, we'd like to hear from you.
Join our growing global team and accelerate your career with us.
About us
NTT Ltd. is a leading global technology services company. Working with organizations around the world, we achieve business outcomes through intelligent technology solutions.For us, intelligent means data driven, connected, digital and secure. As a global ICT provider, we employ more than 40,000 people in a diverse and dynamic workplace that spans 57 countries, trading in 73 countries and delivering services in over 200 countries and regions
NTT is proud to be an equal opportunity employerwith a global culture that embraces diversity. We are committedto providing an environment free of unfair discrimination and harassment.We do not discriminate based on age, race, color, sex, religion, national origin, disability, pregnancy, marital status, sexual orientation, gender reassignment, veteran status, or other protected category.
#J-18808-Ljbffr
Senior Cyber Security Analyst in Sydney employer: NTT
Join a leading maritime safety agency that prioritises innovation and employee growth in a collaborative environment. As a Senior Power Platform Developer, you'll not only contribute to vital digital solutions enhancing maritime safety across Australia but also enjoy mentorship opportunities and a culture that values continuous improvement. With a focus on cutting-edge technologies and a commitment to professional development, this role offers a rewarding career path in a dynamic and supportive workplace.
