Senior Cyber Risk Metrics & Reporting Analyst

The Reserve Bank of Australia (RBA) is seeking a Senior Cyber Risk Metrics & Reporting Analyst to join our Cyber Risk & Compliance team. This is a unique opportunity to contribute to the Bank’s mission by proactively identifying, assessing, and managing cybersecurity risks, ensuring compliance with regulatory requirements and industry standards.

Requirements

• Design and deliver high-quality, data-driven insights that inform senior leaders, uplift risk maturity, and support reporting obligations to the board and other governing boards.
• Develop sophisticated dashboards, automate reporting processes, and ensure our cyber metrics accurately reflect risk posture, compliance status, and operational performance.
• Aggregate and analyse data from multiple sources (incidents, vulnerabilities, audits, controls, risk registers) to identify trends and insights.
• Work closely with teams to ensure metrics align with standards such as CPS 234, ISO 27001, and the ACSC Top 37, internal standards, and enterprise risk frameworks.
• Support the maintenance of accurate cyber risk and compliance data, including risk registers, control libraries, assurance results, and third-party risk information.
• Provide analytical support for cyber audits, compliance assessments, and Line 1/Line 2 reporting.
• Enhance data quality, automation, and reporting consistency across Cyber Security and Risk functions.
• Contribute to reporting for operational resilience activities such as BIA, BCP metrics, scenario analysis and control assurance.
• Maintain documentation of metric definitions, data sources, assumptions and reporting standards.

Benefits

• Hybrid work environment
• Permanent Role
• Competitive salary and benefits
• Opportunities for professional development and career growth
• Collaborative and dynamic work environment
• Flexible working arrangements