Cyber GRC Analyst - Sydney

Australian Payments Plus (AP+) is here to shape the future of payments for Australia. We aim to deliver more innovation to Australia’s payments ecosystem, for the collective benefit of Australian businesses, government and consumers.

Our solutions include Australia’s domestic debit network, real-time, data rich payments infrastructure, secure bill payments, digital identity verification, QR payments and experiences and open wallet solutions. It’s a new chapter with more possibilities.

Life @ AP+:

Taking steps forward in your career whilst still having room for fun, friendships, and flexibility in your daily life.

We’re driven by our core values: lead with heart, learn for tomorrow and live our legacy. A purpose like ours takes the inspired impact of an incredible team. Ready to change the game? We’re ready to help you do it.

To support a disciplined and structured approach to cyber governance, risk, and compliance, this role is responsible for identifying and managing cybersecurity risks and supporting successful outcomes in audits and assessments against standards including PCI DSS, ISO 27001, and best practice frameworks like the NIST Cybersecurity Framework.

This role operates across the Cyber function and requires a proactive, analytical individual with a curious mindset who can interpret and synthesise data from multiple sources to provide meaningful insights. The successful candidate will actively contribute to the maturity of cyber governance and risk practices across AP+, applying recognised standards to drive continuous improvement and ensure effective oversight.

Proposed Role Responsibilities are:

• Maintain cyber security policies and procedures through annual renewal and align them with the overall policy framework.
• Drive the continuous improvement of AP+ Information Security Management System.
• Perform internal reviews of cyber security controls.
• Provide reporting of security status to relevant key stakeholders.
• Support in maintaining compliance requirements and security practises ISO27001, PCI-DSS.
• Understand and be aware of the latest news or updates on standards and regulations as they apply to AP+ and advise on proactive solutions to the wider team and business.
• Participate in risk assessments, control gap analysis and reporting of results.
• Assist with third-party cyber assessments.
• Escalation of cyber security issues as appropriate.
• Build strong relationships with internal and external stakeholders to champion cyber security best practices.
• Contribute to the success of cyber security governance, risk, and compliance at AP+.

Proposed Position Requirements are:

• 2+ years related experience in a similar position with a focus on cyber security and compliance.
• Experience and expertise of auditing against security standards.
• Must have solid working experience and knowledge of PCI DSS and ISO27001.
• Experience in writing and implementing policies and procedures across a business.
• Ability to document a business impact assessment through to recovery plan.
• Experience of a conducting internal audits and risk assessments.
• Strong process and procedure ownership experience for system audits.
• Excellent communication skills both written and verbally to present highly technical information to a non-technical audience.
• Ability to bring ideas to the table, an innovative / open mindset who thinks outside the box.

What happens next:

At AP+, we believe in the power of passion, pride, and purpose. Our team is driven by a shared mission to make a difference in the world of payments, and we're proud to work together towards this common goal.

If you’re ready to be a game changer, please submit your application & the Talent Acquisition team will endeavour to review and notify you of the outcome within the next two weeks.

We want to remove all barriers to inclusion so if you need advice or support with your application, we’re here to help. Please reach out to recruitment@auspayplus.com.au We also encourage you to let us know your pronouns at any point during the recruitment process.

AP+ are not partnering with Recruitment agencies for this role.