About the Role
The Reserve Bank of Australia (RBA) is seeking a Senior Cyber GRC Analyst to join our Cyber Risk and Compliance team on a permanent basis. This role is crucial for identifying, assessing, and managing cybersecurity risks, ensuring compliance with regulatory requirements and industry standards, and supporting the Bank's mission.
Responsibilities
- Partner with business units and Line 2 stakeholders to strengthen cyber risk management practices in line with the Bank’s 3LoA model.
- Identify and anticipate cyber risk and compliance challenges aligned with strategic and operational objectives.
- Conduct third-party cyber risk assessments and provide ongoing assurance based on vendor risk profiles.
- Maintain and update the cyber risk & control library and taxonomy, including mapping to frameworks such as Top 37, Essential Eight (E8), and NIST CSF.
- Aggregate system-level risks and issues for departmental and enterprise reporting.
- Support internal and external audits (e.g., SWIFT CSP, ISO 27001, CPS 234).
- Coordinate and execute cyber audit activities across the Bank.
- Drive cyber operational resilience by supporting Business Impact Analysis and Business Continuity Planning reviews, and cyber operational risk assurance activities.
- Maintain and report on risk scenarios, Bowtie analyses, and risk profiles for both Line 1 and Line 2 departments.
- Apply deep understanding of risk and compliance frameworks, preferably within central banking or financial services.
- Lead and coordinate cyber control testing activities in line with the Risk and Compliance Management Framework.
- Develop and embed an automated approach to cyber control assurance, improving efficiency and effectiveness.
Requirements
- At least 3 years of experience in a dedicated cybersecurity role, with a focus on risk and compliance.
- Extensive experience in cyber control testing, including the design and implementation of automated control assurance techniques.
- Strong understanding of enterprise risk management frameworks, 3LoA model and regulatory standards.
- Proven ability to engage and influence stakeholders across Lines 1 and 2.
- Familiarity with cyber control frameworks and enterprise risk reporting tools.
- Experience with Business Continuity Management and cyber risk assurance in complex operational environments.
- Experience with third-party risk management and audit coordination.
- Undertake an AGSVA ‘Baseline’ security clearance.
Skills
- Cybersecurity
- Risk Management
- Compliance
- Cyber Risk Reporting
- Third-Party Risk Assessments
- Control Testing
- Automated Control Assurance
- Enterprise Risk Management Frameworks
- 3LoA Model
- Regulatory Standards
- Stakeholder Engagement
- Business Continuity Management
- Cyber Risk Assurance
- Third-Party Risk Management
- Audit Coordination
Location
- Hybrid
Work Type
- Permanent
- Hybrid
Experience Level
- Senior
Benefits
- Development and career opportunities
- Collaborative environment
- Support for growth
- Wellbeing support
- Flexibility
About the Company
- The Reserve Bank of Australia (RBA) plays an important part shaping the future of our iconic Australian institution.
- The RBA makes an important contribution to the Australian economy through the pursuit of national economic policy objectives and associated activities in financial markets and banking.
- We also issue Australia's banknotes and operate infrastructure critical to the payments system, all of which contribute to the welfare of the Australian people.
- Our people conduct themselves with a high degree of integrity, while striving for excellence in the work they perform and the outcomes they achieve.
- We encourage intelligent inquiry, and we treat one another with respect while promoting the public interest through our efforts.
- It is the growth and success of our people that drives the RBA forward.
Equal Opportunity
- The Reserve Bank of Australia is committed to equity, diversity and inclusion through key initiatives.
- We welcome and encourage applicants from diverse backgrounds to apply, including Aboriginal and Torres Strait Islander peoples, culturally and linguistically diverse.
