GRC Analyst

About Southern Ports

Southern Ports operates the gateway ports of Albany, Bunbury, and Esperance, connecting regional WA to global markets. We focus on safe, efficient, and sustainable port operations, delivering value to our customers and communities. With a strong commitment to our people, we’re building a diverse, high-performing workforce to support the future of regional trade.

Benefits of Joining Southern Ports

Joining Southern Ports Authority comes with numerous benefits that cater to a wide range of professional and personal needs, some examples being:

• Flexible Working Arrangements: Enjoy a work-life balance that suits your lifestyle and personal commitments.

• Annual Health and Well-being Benefits: Take advantage of programs and resources aimed at maintaining your physical and mental health.

• Salary Sacrificing Options: Maximise your take-home pay through tailored salary packaging arrangements such as Novated Car Leasing and Superannuation

• Opportunity to Travel: Experience different geographical regions in Western Australia, enhancing your professional and personal growth.

• Generous Purchase Leave Options: Gain additional leave options to suit your personal needs and preferences.

Salary:

$148,897 + superannuation + regional allowance if based regionally, increasing to $156,342 + superannuation + regional allowance from 1 January 2027.

The Role

Join Southern Ports as a GRC Analyst on a fixed-term contract until 30 June 2028, with the flexibility to work from any of our locations in Perth, Bunbury, Albany or Esperance.

Play a key role in strengthening technology governance, security and risk management by independently assessing risks across vendors, applications and technology solutions. You’ll also support our Cyber Uplift Program, helping enhance Southern Ports’ cybersecurity posture and resilience.

If you’re passionate about technology risk, governance and making a meaningful impact, this is an exciting opportunity to contribute to a critical organisation while working from a location that suits you.

Key Duties and Responsibilities

• Conduct risk assessments of new and existing vendors, applications and technology solutions.

• Assess cybersecurity, compliance, resilience, vulnerabilities and security controls.

• Identify security and risk gaps and recommend practical mitigation strategies.

• Assess technology delivery risks across architecture, projects, development and deployment.

• Prepare clear risk reports and communicate findings to stakeholders and senior management.

• Support continuous improvement of risk processes and alignment with security policies and WA Government requirements.

Required

• Relevant tertiary qualification in IT, Cybersecurity, Computer Science or a related field, with 2+ years’ experience in technology risk assessment.

• Strong knowledge of cybersecurity and IT risk frameworks, including NIST, ISO 27001, ASD ISM and SOC 2.

• Understanding of enterprise IT environments, cloud security and application security principles.

• Strong analytical, problem-solving and critical-thinking skills, with the ability to translate technical risks into business impacts.

• Excellent communication and stakeholder engagement skills, with strong attention to detail and ability to work collaboratively.

Preferred

• Relevant cybersecurity or IT certifications are desirable, such as CISSP, CISA, CISM or CySA+.

• Knowledge of technology risk, regulatory compliance and security requirements, including the SOCI Act and WA Government Cyber Security Policy.

• Experience in regulated environments, with an understanding of procurement, vendor management and contractual risk.

• Understanding of SDLC and secure development practices, with strong report writing skills.

To see the PD for this role, please copy and paste the below link into your browser:

https://www.dropbox.com/scl/fi/nkzt6flme4w20q5fb3og6/PD-GRC-Analyst.pdf?rlkey=q4ze7z2q3d59kfkyhc0zeggw3&st=p6bxf35u&dl=0

To see the EA for this role, please copy and paste the below link into your browser:

https://www.dropbox.com/scl/fi/d20qzm3ncxo4fz0g2sovs/Southern-Ports-Administration-and-Specialist-Agreement.pdf?rlkey=vdfw9t7mrojoua7x6t2l8mx9f&st=kes3irjq&dl=0

Requirements

 To apply, please submit your application through our advertisement. Ensure you include an up-to-date resume.

To be eligible for this role, applicants must reside either Perth, Bunbury, Albany or Esperance and provide proof of Australian citizenship or permanent residency.

The successful applicant must:

·       Have a current Western Australian driver’s licence

·       Be able to obtain and maintain a Maritime Security Identification Card

·       Pass a pre-employment medical assessment including drug and alcohol testing

·       Provide a National Police Certificate that is within a 6-month period.

Southern Ports is proud to be an Equal Employment Opportunity employer and does not discriminate against race, gender, age, religion, sexual preference or disability. We encourage applications from all culturally diverse backgrounds, Indigenous Australians and Non-Indigenous Australians. Southern Ports is committed to creating and maintaining an inclusive and impartial workplace with equal opportunities for all employees.

Applications close: COB 24 September 2026

We reserve the right to commence the recruitment process during the application period.