Senior Security Analyst (GRC)

Do work that makes a difference

Join an organisation who’s making a real difference to Victoria's energy future. SEC’s passionate people are working to support the transition to renewable energy and delivering affordable, reliable, renewable energy for all Victorians.

We offer hybrid working with offices in Melbourne’s CBD and Morwell.

What your day could look like

Every day will look a little different as you partner with teams across Technology & Data and the broader SEC to strengthen cyber resilience and support critical business initiatives. You’ll take ownership of security controls & compliance assurance, ensuring security controls remain effective, aligned to ISO/IEC 27001 and key regulatory obligations, while working closely with control owners to assess maturity, address gaps and support audits. At the same time, you'll lead technology risk governance & advisory, facilitating risk discussions, maintaining the technology risk landscape and translating complex security issues into clear business decisions for leaders and stakeholders.

You’ll also play a key role in security engagement, awareness & change enablement, acting as a trusted advisor across projects and transformation initiatives. Whether supporting new technology capabilities, driving security awareness across the workforce or helping teams implement practical risk treatments, you’ll balance governance with commercial outcomes. Success in this role comes from building strong relationships, influencing decision-making and ensuring security remains embedded in the way SEC delivers a reliable, affordable and sustainable energy future for Victoria.

What you need to be successful

You’ll bring deep experience in cyber security governance, risk and compliance, with the ability to balance strong security outcomes with practical business needs. Comfortable operating in a complex stakeholder environment, you can translate technical security concepts into meaningful business risks and actions, build trusted relationships across teams, and take ownership from identifying an issue through to implementing a sustainable solution. Your experience working with security controls frameworks, technology risk management and assurance activities will enable you to confidently influence decision-making and strengthen SEC’s cyber security posture.

• Demonstrated expertise in cyber security governance, risk and compliance, including hands-on experience with ISO/IEC 27001-aligned controls frameworks, risk assessments, assurance activities and remediation management.
• Proven ability to manage technology or cyber risks throughout their lifecycle, leveraging GRC platforms, facilitating stakeholder discussions and providing clear, actionable reporting to business and technology leaders.
• Experience building and/or administering a controls library, including conducting control assessments, managing evidence, identifying gaps and driving remediation activities to improve security effectiveness and compliance outcomes.

What is it like to work at SEC?

Join a team of passionate, purpose-driven people who care about the work they do and the people they work with. At SEC, our collaborative and inclusive culture means you’ll enjoy working beside people who celebrate each other's achievements. You’ll also do meaningful work, build great relationships, and help shape Victoria's energy future.

We offer flexible working options designed to support individual circumstances. To find more about our purpose and what it’s like to work at SEC, visit us on LinkedIn or our website (secvictoria.com.au).

How to apply

We strongly encourage applications from Aboriginal and Torres Strait Islander people. We are also deeply committed to building an inclusive workplace that embraces diversity and people with disability, people from the LGBTIQ community, and people from culturally diverse backgrounds. We strive to create a respectful and collaborative workplace culture that allows all employees to thrive.

Click the ‘Apply Now’ button. As part of the application process, you will need to provide a copy of your resume. You can also provide a cover letter outlining how your skills, knowledge and experience are relevant to this role.

For further information and to explore this opportunity further, contact sec.careers@secvictoria.com.au.

Other important information:

• You must be an Australian citizen, permanent resident or hold a valid work permit to be eligible to apply.
• To receive this information in an accessible format (such as large print or audio) or if you require any reasonable adjustments during the recruitment process, please reach out to sec.careers@secvictoria.com.au.

Data collection

SEC engages a third-party recruitment provider to assist with applications and assessments. This may include collecting information such as your contact details, employment history, qualifications, referee details, and assessment results (including psychometric test results, which may constitute sensitive information).

Your personal information is collected and used for the purpose of assessing your suitability for employment and managing the recruitment process. By submitting your application, you consent to SEC and our recruitment provider collecting, using, and disclosing your personal and sensitive information for these purposes.

SEC and its service providers will handle your information in accordance with applicable privacy laws and SEC’s Privacy Policy, available online at https://www.secvictoria.com.au/privacy-policy. You may request access to, or correction of, your personal information by contacting SEC at privacy@secvictoria.com.au.