Experienced Analyst - Technology Audit & Risk

𝗣𝗲𝗿𝗺𝗮𝗻𝗲𝗻𝘁, 𝗳𝘂𝗹𝗹-𝘁𝗶𝗺𝗲 𝗿𝗼𝗹𝗲 | 𝗛𝘆𝗯𝗿𝗶𝗱

𝘠𝘰𝘶’𝘷𝘦 𝘣𝘶𝘪𝘭𝘵 𝘢 𝘴𝘰𝘭𝘪𝘥 𝘧𝘰𝘶𝘯𝘥𝘢𝘵𝘪𝘰𝘯 𝘪𝘯 𝘪𝘯𝘵𝘦𝘳𝘯𝘢𝘭 𝘢𝘶𝘥𝘪𝘵 𝘢𝘯𝘥 𝘳𝘪𝘴𝘬, 𝘢𝘯𝘥 𝘺𝘰𝘶𝘳 𝘯𝘦𝘹𝘵 𝘳𝘰𝘭𝘦 𝘴𝘩𝘰𝘶𝘭𝘥 𝘮𝘢𝘬𝘦 𝘵𝘩𝘦 𝘮𝘰𝘴𝘵 𝘰𝘧 𝘪𝘵. 𝘠𝘰𝘶 𝘮𝘪𝘨𝘩𝘵 𝘣𝘦 𝘢𝘧𝘵𝘦𝘳 𝘮𝘰𝘳𝘦 𝘳𝘦𝘴𝘱𝘰𝘯𝘴𝘪𝘣𝘪𝘭𝘪𝘵𝘺, 𝘢 𝘵𝘦𝘢𝘮 𝘸𝘩𝘦𝘳𝘦 𝘺𝘰𝘶𝘳 𝘷𝘰𝘪𝘤𝘦 𝘤𝘢𝘳𝘳𝘪𝘦𝘴 𝘸𝘦𝘪𝘨𝘩𝘵, 𝘰𝘳 𝘢 𝘣𝘦𝘵𝘵𝘦𝘳 𝘣𝘢𝘭𝘢𝘯𝘤𝘦 𝘣𝘦𝘵𝘸𝘦𝘦𝘯 𝘸𝘰𝘳𝘬 𝘢𝘯𝘥 𝘦𝘷𝘦𝘳𝘺𝘵𝘩𝘪𝘯𝘨 𝘦𝘭𝘴𝘦. 𝘞𝘩𝘢𝘵𝘦𝘷𝘦𝘳 𝘩𝘢𝘴 𝘺𝘰𝘶 𝘭𝘰𝘰𝘬𝘪𝘯𝘨, 𝘈𝘴𝘵𝘦𝘳 𝘪𝘴 𝘸𝘩𝘦𝘳𝘦 𝘨𝘰𝘰𝘥 𝘤𝘢𝘳𝘦𝘦𝘳𝘴 𝘣𝘦𝘤𝘰𝘮𝘦 𝘨𝘳𝘦𝘢𝘵.

𝗔𝗯𝗼𝘂𝘁 𝘁𝗵𝗲 𝗷𝗼𝗯

Aster Advisory is looking for someone with two to three years’ experience to join our Technology Risk team as an experienced/senior analyst. This role suits someone who is ready to take the next step building their career in internal audit in a supportive, collaborative firm.

𝗪𝗵𝘆 𝗔𝘀𝘁𝗲𝗿

Aster was established in July 2024 and built on two decades of experience, to provide a truly independent, specialist boutique firm with a focus on our public sector clients. With around 40 professionals, we’re not a large firm, and deliberately so. We're growing, but not at the expense of our people or the quality of our work. Our strong staff retention reflects a culture where people feel valued, supported and want to build their careers. Our clients stay with us too. We have retained most clients who have gone back to competitive tender after five or more years. Together, these relationships reflect the trust we've earned, the quality of our work and the strength of the business we're building.

We acknowledge that careers aren’t linear, and neither are lives. At Aster you might move from building your technical foundations, to leading engagements, to managing teams and helping shape the business, while life outside work changes too. We design how we work to flex with both.

What stays constant is why we’re here: helping our public sector clients run their organisations well, make sound decisions, spend money wisely and act with integrity, through independent assurance and advice.

At Aster, you will find:

• 𝗔 𝗳𝗶𝗿𝗺 𝗯𝘂𝗶𝗹𝘁 𝗳𝗼𝗿 𝘁𝗵𝗲 𝗹𝗼𝗻𝗴 𝘁𝗲𝗿𝗺: one of the largest internal audit and probity practices in Victoria, with leading methodologies and a strong client base, combined with the agility and close-knit culture of a boutique firm. That’s a firm you can build a career with.

• 𝗠𝗲𝗮𝗻𝗶𝗻𝗴𝗳𝘂𝗹 𝘄𝗼𝗿𝗸 𝗮𝗻𝗱 𝗿𝗲𝗮𝗹 𝗿𝗲𝘀𝗽𝗼𝗻𝘀𝗶𝗯𝗶𝗹𝗶𝘁𝘆: a varied portfolio where you’ll take on meaningful parts of engagements, build direct client relationships and contribute to firm-wide initiatives. You’re an integral part of the team, not just a name on a resourcing spreadsheet.

• 𝗔 𝘃𝗼𝗶𝗰𝗲 𝘁𝗵𝗮𝘁 𝗰𝗮𝗿𝗿𝗶𝗲𝘀 𝘄𝗲𝗶𝗴𝗵𝘁: a flat structure where you work directly with experienced managers, directors and executive directors, leaders are accessible, and your ideas are heard and acted on.

• 𝗗𝗲𝘃𝗲𝗹𝗼𝗽𝗺𝗲𝗻𝘁 𝘁𝗵𝗮𝘁’𝘀 𝗴𝗲𝗻𝘂𝗶𝗻𝗲𝗹𝘆 𝗽𝗲𝗿𝘀𝗼𝗻𝗮𝗹: a tailored development plan backed by a structured performance framework underpinned by regular coaching, training opportunities and support for further study. Whether you want to become a technical expert, lead engagements or manage client relationships, we’ll help you get there.

• 𝗔 𝗰𝗮𝗿𝗲𝗲𝗿 𝘁𝗵𝗮𝘁 𝗳𝗶𝘁𝘀 𝘆𝗼𝘂𝗿 𝗹𝗶𝗳𝗲: genuine flexibility, hybrid working, family-friendly leave and wellbeing initiatives that adapt as your priorities change.

Wherever you are in your career, you’ll have people in your corner from day one. When you join, you’ll be paired with a buddy to help you settle in, and you’ll work alongside supportive managers who review your work, coach you through it and are there when you’re stuck.

Please visit www.asteradvisory.com.au to find out more about the story of Aster and our team.

𝗬𝗼𝘂𝗿 𝗿𝗼𝗹𝗲

You’ll deliver technology audit and advisory work for clients across the public sector, not-for-profit, healthcare and disability, education and commercial sectors. The work you will undertake will cover cyber security, data governance, privacy, disaster recovery, IT strategic planning, digital transformation and, increasingly, artificial intelligence. From day one, you’ll work directly with clients alongside our senior team and take ownership of parts of each engagement. Your role is to provide practical, technically sound advice that executives and boards can understand and act on. Your ideas will shape how organisations improve the way they serve their customers and communities. Day to day, that includes:

• Contributing to audit scoping and planning to help get audit projects off the ground
• Interacting with clients to gain context about their business and a detailed understanding of their business processes and systems
• Conducting targeted testing of controls to evaluate their effectiveness
• Performing analysis to identify issues, root causes and opportunities for improvement
• Drafting clear, well-supported findings and recommendations based on observed risk
• Supporting and mentoring our graduate analysts to facilitate their growth

𝗪𝗵𝗮𝘁 𝘆𝗼𝘂 𝗰𝗮𝗻 𝗯𝗿𝗶𝗻𝗴

We’d love to hear from you if you have:

• Around two to three years’ experience in delivering IT audit, advisory or assurance engagements
• A broad understanding of technology and the opportunities and risks it presents to organisations
• Hands-on experience testing IT general controls and assessing whether controls are well designed and operating effectively
• Working knowledge of common technology and cyber security frameworks, such as the Essential Eight, NIST CSF, ISO/IEC 27001 and the Victorian Protective Data Security Framework
• Strong communications skills and the ability to explain technical matters to people without a technical background
• Sound judgement about what matters most, and the ability to manage your work across several engagements at once
• A collaborative approach, including a willingness to support and guide graduate analysts
• A genuine curiosity about emerging technology and how it is changing the way organisations operate, and a drive to for continuous learning

A technology degree and/or relevant certification such as CISA or CISM is desirable, but not essential for this role. Our team comes from a range of backgrounds, and we value people who combine technical understanding with good judgement and clear communication. We also know that good candidates sometimes hold back from applying if they don’t meet every criterion. If this role interests you and you meet most of what we’re looking for, we encourage you to apply.

𝗘𝗹𝗶𝗴𝗶𝗯𝗶𝗹𝗶𝘁𝘆

• Australian citizen or permanent resident

• Based in Victoria with capacity to attend the Melbourne CBD office and visit client sites

While this is a full-time role, we are open to discussing part-time arrangements for the right candidate.

𝗛𝗼𝘄 𝘁𝗼 𝗮𝗽𝗽𝗹𝘆

Please send your CV and a covering letter (maximum 1 page) addressing the following:

1. What has you looking for your next move, and why Aster?

2. Where would you like to take your career over the next few years?

𝗔𝗽𝗽𝗹𝗶𝗰𝗮𝘁𝗶𝗼𝗻𝘀 𝗺𝘂𝘀t 𝗯𝗲 𝘀𝗲𝗻𝘁 𝘁𝗼 𝗿𝗲𝗰𝗿𝘂𝗶𝘁𝗺𝗲𝗻𝘁@𝗮𝘀𝘁𝗲𝗿𝗮𝗱𝘃𝗶𝘀𝗼𝗿𝘆.𝗰𝗼𝗺.𝗮𝘂

𝗪𝗵𝗮𝘁 𝗵𝗮𝗽𝗽𝗲𝗻𝘀 𝗻𝗲𝘅𝘁

We’ll review all applications and contact shortlisted candidates for an initial conversation about your experience, what you’re looking for and whether there’s a fit on both sides. Candidates who progress to the next stage will then have one or more interviews with the people you’d work alongside and report to. If it’s a match, we’ll make you an offer and complete background checks.