Senior Cyber GRC Analyst (Projects)

• Hybrid work environment
• 2 Year Fixed Term Contract November 2028
• Help shape the future of an iconic Australian institution.
• Join a high-impact team shaping cyber risk, resilience and regulatory compliance.
• AGSVA ‘Baseline’ security clearance required

About the business/role/team
The Reserve Bank of Australia (RBA) is seeking a Senior Cyber GRC Analyst to join our Cyber Risk & Compliance team on a 2-year fixed-term contract until November 2028. Reporting to the Manager, Cyber Risk & Compliance, you’ll work within a high-performing Cybersecurity team, proactively identifying and managing cyber risks, supporting regulatory compliance and helping uplift the Bank’s cybersecurity maturity.
About the role

In this role, you will partner with Line 1 business units and collaborate with Risk Management (Line 2) to deliver accurate and timely cyber risk reporting. You’ll help maintain alignment with the Bank’s enterprise risk management framework under the ‘Three Lines of Accountability’ (3LoA) model and ensure compliance with standards such as CPS 234, ISO 27001, and the ACSC Top 37.

Reporting to the Manager, Cyber Risk and Compliance, you will be part of a multi-disciplinary IT Cyber function and responsible for:

• Partnering with business units and Line 2 stakeholders to strengthen cyber risk management practices in line with the Bank’s 3LoA model.
• Identifying and anticipating cyber risk and compliance challenges aligned with strategic and operational objectives.
• Conducting third-party cyber risk assessments and providing ongoing assurance based on vendor risk profiles.
• Maintaining and updating the cyber risk & control library and taxonomy, including mapping to frameworks such as Top 37, Essential Eight (E8), and NIST CSF.
• Aggregating system-level risks and issues for departmental and enterprise reporting.
• Supporting internal and external audits (e.g., SWIFT CSP, ISO 27001, CPS 234).
• Coordinating and executing cyber audit activities across the Bank.
• Driving cyber operational resilience by supporting Business Impact Analysis and Business Continuity Planning reviews, and cyber operational risk assurance activities.
• Maintaining and reporting on risk scenarios, Bowtie analyses, and risk profiles for both Line 1 and Line 2 departments.
• Applying deep understanding of risk and compliance frameworks, preferably within central banking or financial services.
• Leading and coordinating cyber control testing activities in line with the Risk and Compliance Management Framework.
• Developing and embedding an automated approach to cyber control assurance, improving efficiency and effectiveness.

The successful candidate will also be required to undertake an AGSVA ‘Baseline’ security clearance.

About you

You are passionate about cybersecurity, risk, and compliance, and enjoy sharing that passion with others. You bring a collaborative mindset and a strong ability to influence stakeholders across the RBA. To be successful in this critical role you will possess the following skills:

• At least 3 years of experience in a dedicated cybersecurity role, with a focus on risk and compliance.
• Extensive experience in cyber control testing, including the design and implementation of automated control assurance techniques.
• Strong understanding of enterprise risk management frameworks, 3LoA model and regulatory standards.
• Proven ability to engage and influence stakeholders across Lines 1 and 2.
• Familiarity with cyber control frameworks and enterprise risk reporting tools.
• Experience with Business Continuity Management and cyber risk assurance in complex operational environments.
• Experience with third-party risk management and audit coordination.

Highly Desirable

• Experience in cyber risk and compliance roles within financial services or central banking

Be More
Working for an organisation that truly makes a difference to the people of Australia, we can offer development and career opportunities in a collaborative environment that supports your growth, wellbeing and promotes flexibility. Your individual growth and success drives the RBA forward as an organisation. Be more means you can do more, for yourself and for Australia.
Why RBA?
The RBA makes an important contribution to the Australian economy through the pursuit of national economic policy objectives and associated activities in financial markets and banking. We also issue Australia's banknotes and operate infrastructure critical to the payments system, all of which contribute to the welfare of the Australian people. Made up of specialists across a wide range of fields, our people, values, and culture play a critical role in achieving our objectives. Striving to be Open & Dynamic, we consider and incorporate different perspectives, work across teams and are transparent with each other, whilst delivering quality together effectively and focusing on outcomes by prioritising, testing, learning, and refining as we go. Our people conduct themselves with a high degree of integrity, while striving for excellence in the work they perform and the outcomes they achieve. We encourage intelligent inquiry and we treat one another with respect while promoting the public interest through our efforts. We know it is the growth and success of our people that drives the RBA forward. Come and make a bigger contribution while you build and develop your own skills too, because being more means you can do more, for yourself and for Australia.
The Reserve Bank of Australia is committed to equity, diversity and inclusion through key initiatives. We welcome and encourage applicants from diverse backgrounds to apply, including Aboriginal and Torres Strait Islander peoples, culturally and linguistically diverse background, those living with a disability and from the LGBTQ+ community. We are committed to making the recruitment process fair and equitable for all our candidates.

Application Close :

.