Cyber Security Assurance Analyst

• Newly created GRC function
• Join a growing cyber function with the opportunity to help shape assurance practices and security standards
• Initial 12 month max-term contract - Melbourne location

Due to significant global growth Kinetic are undertaking a large scale multi stream program of work designed to transform our technology landscape create simplified consistent ways of working and ensure our future growth plans are underpinned by seamless technology products and processes.

Part of this transformation program is a major cyber security uplift across the Kinetic business. As the Cyber Security Assurance Analyst youll ensure security is designed into our applications and vendor relationships from the outset rather than added on afterwards. Reporting directly to the Information Security Manager youll define security requirements during market scans and procurement negotiate them into vendor contracts and confirm they carry through design and implementation. Youll also build and maintain the assurance register that evidences our security control posture across the application landscape supporting Kinetics ISO 27001 certification and governance audit obligations.

• Youll work closely with the Information Security Manager to:
• Define and maintain security requirements for technology procurement projects and solution delivery.
• Conduct cyber assurance assessments of vendors suppliers and proposed technology solutions.
• Review and negotiate security requirements within commercial and technology contracts.
• Partner with Architecture Project and Procurement teams to embed security throughout delivery lifecycles.
• Validate security controls and manage remediation activities prior to production deployment.
• Own and maintain the Cyber Security Assurance Register across Kinetics application landscape.
• Lead third-party security assurance and risk assessment activities.
• Support ISO 27001 certification governance reviews and ongoing compliance reporting.

• Experience reviewing and negotiating security clauses and schedules in commercial and vendor contracts.
• Background in vendor and third-party risk assessment (TPRM) including gap assessment against security requirements.
• Working knowledge of ISO 27001 Annex A controls and the evidence required to demonstrate them along with an understanding of the Essential 8.
• Comfortable reading solution architecture and design documentation and translating it into control requirements.
• Certifications such as ISO 27001 Lead Implementer or Lead Auditor CISSP CISM or CRISC are highly recommended.
• Experience with GRC or register tooling (such as Jira ServiceNow GRC or Archer) and strong analytical skills and attention to detail.
• Excellent communication and interpersonal skills with the confidence to negotiate directly with vendors Legal and Procurement.
• Most importantly our values resonate with you Passion Integrity Respect Authenticity Humility.

At Kinetic we dont just move people - were creating the positive change our planet needs. As a leader in sustainable transport were committed to creating cleaner safer and greener environments for generations to come.

Our size and scale give our people real opportunities to learn grow and progress in their careers. Calm positive and respectful team players thrive here. Our people embrace change and are encouraged to stretch their comfort zone while making a difference. We challenge each other to be our best.

Were driven by respect diversity and genuine connection. From networking groups to community partnerships and volunteering our camaraderie naturally brings people together. Our energy and dedication keep communities moving and our people growing.

Kineticis proud to be an Equal Opportunity Employer and our people represent the community which we service. We invite all suitably qualified applicants to apply including First Nations People and people from diverse social cultural and gender backgrounds.

If youre interested in this rewarding role with Kinetic then click the Apply button now!