IT Security Analyst - Assurance

Knowledge, Skills and Experience

• At least 2 years' experience in information security or IT risk, with hands-on exposure to technical security assessments
• Demonstrated ability to conduct structured threat and risk assessments using recognised methodologies (e.g. STRIDE, OCTAVE, NIST RMF)
• Practical exposure reviewing security architectures including cloud security (Azure/M365) and hybrid infrastructure
• Familiarity with vulnerability management tooling (e.g. Qualys, Tenable, CrowdStrike)
• Excellent knowledge of security frameworks such as ISO27001, SSAE16, APRA CPS234, ASD Essential 8, and NIST v2.0
• Expert coordination skills with ability to maintain programs on schedule
• Demonstrated experience writing high quality executive reports/briefings
• Experience running internal IT audits and supplier assessments
• Agile mindset with ability to manage tasks independently
• Relevant certifications highly desirable (CISSP, CISM, CISA, CompTIA Security+, or cloud security certifications)

Personal Attributes

How to apply

• We encourage applications from people of all ages, abilities, cultural backgrounds, genders (including trans or gender diverse), LGBTQ+ people and those with carer responsibilities. We particularly encourage Aboriginal and Torres Strait Islander people to apply.
• We prefer to connect with people directly, so please submit your CV by clicking on the 'Apply' button. We encourage all applications, including if you do not meet all the criteria listed for the role. Your application will also enable us to consider you for other opportunities that may be available at MinterEllison.
• If you are currently a MinterEllison employee, please apply through the internal careers page.
• If you would like further information, require any adjustments throughout the recruitment process or for a confidential discussion, please contact lisa.fleming@minterellison.com.
• Brisbane, AU Sydney, AU Melbourne, AU