Cyber GRC Analyst

Role overview

Hume City Council is seeking a meticulous and analytical Cyber GRC Analyst to join its Cyber team within the Information Technology function. This permanent full-time position is based in Broadmeadows, Victoria, and offers an annual salary of $83,714.28 plus superannuation.

In this position, you will help strengthen the Council’s information security posture by designing, rolling out, and maintaining governance, risk, and compliance practices. You will work across teams to identify security exposures, close compliance gaps, and support the adoption of effective controls, policies, and standards.

Hume City Council is among Australia’s fastest-growing and most culturally varied councils, with a strong focus on customer service and community outcomes.

Key duties

• Build, implement, and maintain cybersecurity governance structures aligned to relevant standards and frameworks, including VPDSS, ASD Essential Eight, ISO 27001, and PCI DSS.
• Perform risk reviews and vulnerability assessments to spot security threats and compliance shortfalls, and help define remediation actions.
• Draft, update, and manage information security policies, procedures, and supporting documentation that contribute to compliance objectives.
• Track the performance of security controls and suggest improvements that strengthen the organisation’s overall security posture.
• Prepare compliance updates and reports for managers and stakeholders, clearly outlining findings, risks, and corrective actions.
• Assist with internal and external audits by supplying evidence, documentation, and explanations relating to controls and compliance measures.
• Keep up to date with changing cyber threats, regulatory expectations, and industry good practice.
• Work with IT and business stakeholders to embed security requirements into systems and operational processes.
• Maintain the IT risk register, compliance tracking activities, and metrics reporting.
• Educate and guide employees on security policies, compliance responsibilities, and safe security practices.

Skills and experience

The successful candidate should bring practical knowledge of the technologies, processes, and procedures used in the relevant operating environment, along with proven experience in cyber governance, compliance, risk, or a comparable function, ideally in government or enterprise settings. Strong understanding of GRC frameworks and methods such as ISO 27001, ISO 42001, and PCI DSS is important, as is a solid grasp of cybersecurity fundamentals, threats, and control design.

You should also be comfortable carrying out risk assessments and compliance audits, documenting policies and procedures, and communicating clearly with technical and non-technical audiences. Strong analytical thinking, attention to detail, and problem-solving ability are essential. Experience with GRC tools and platforms would be an advantage.

Qualifications

A degree or diploma with limited or no relevant experience, or a lesser formal qualification supported by relevant work skills or experience, is required. Professional certifications such as CISSP, CISM, or CRISC are also valued.

Why join Hume City Council

The Council offers a competitive salary package, opportunities for professional development, and a supportive working environment. It is an inclusive, child safe, and equal opportunity employer that encourages applications from people of all ages, people with disability, Aboriginal and Torres Strait Islander people, LGBTIQA+ people, and people from culturally diverse backgrounds.

Hume City Council’s values emphasise continuous improvement, teamwork, accountability, and community focus.

Additional conditions

All shortlisted candidates must complete background and probity checks, including reference checks, a Working with Children Check, and a Criminal Record Check.

Applications are reviewed on an ongoing basis during the advertising period, and the role may close early once enough suitable applications have been received. Applicants are encouraged to apply as soon as possible.

For enquiries, contact [email protected].