search Browse Jobs
Senior Cyber GRC AnalystREA Group · Richmond, Melbourne VIC
REA Group logo

REA Group

company page ↗

Senior Cyber GRC Analyst

🗓️ Posted 2026-10-01 Richmond, Melbourne VIC Hybrid ICT
💰 Salary Not shared 📊 Market A$13,333–A$13,750/mo

About the Company

REA Group (ASX: REA) is not your average digital business. From humble beginnings in a Melbourne garage in 1995, we have grown into a leading digital business specialising in property. We help people with all aspects of their property experience - not just buying, selling, and renting. Our immersive AI-led consumer experiences cover every stage of the property journey offering rich content, unique data and insights, highly accurate property valuation estimates and innovative home financing solutions. We deliver superior value to our customers with a suite of premium products and services, and seamlessly connect them to Australia's largest property audience. Our people are the key to our success and come to work every day living our values. They are purpose driven and collaborative, which drives our innovative culture and our ability to make an impact. Computer Software Specialties: online, media, property, digital, mobile

Responsibilities

  • ● Lead cyber security risk assessments across products, platforms and key initiatives
  • ● Permanent role based in Melbourne
  • ● With bold and ambitious goals, REA Group is changing the way the world experiences property. No matter where you're at on your property journey, we're here to help with every step - whether that's finding or financing your next home.
  • ● Where the team fits in
  • ● The Cyber Security GRC team provide advice and guidance across governance, risk and compliance, helping teams understand their security responsibilities, assess and treat risks, meet regulatory and contractual obligations, and embed secure-by-design practices into products, platforms and initiatives. We also support security assessments, third-party due diligence, compliance programs, reporting and continuous improvement across REA.
  • ● What the role is all about
  • ● The Senior Cyber GRC Analyst is a key role within the GRC team and strengthens REA's cyber resilience by leading the identification, assessment and treatment of technology and information security risks, ensuring our products and platforms comply with relevant security, privacy and regulatory requirements, and enabling informed, risk-based decisions that protect our customers, people and brand while supporting sustainable business growth.
  • ● Day to day of the job
  • ● Design, implement and continuously improve cyber GRC frameworks, policies, standards and supporting processes to fit REA's operating model
  • ● Work closely with other teams within REA Security to ensure they are effectively prioritising the building and operation of cyber security controls, in line with the organisation's risk profile
  • ● Coordinate and oversee control assurance activities (e.g. control testing, audits, attestations) and track remediation through closure. Where possible, automate this assurance work
  • ● Ensure that external compliance obligations and audits are appropriately prepared for and managed
  • ● Provide specialist cyber GRC advice and coaching to technology and product teams to embed secure-by-design and risk-based thinking
  • ● Monitor changes in relevant cyber, privacy and technology standards, contracts and regulations and translate these into practical requirements and guidance for REA
  • ● Prepare and present concise, insightful risk and compliance reporting for technology leadership, risk committees, the board of directors and other stakeholders
  • ● Support third-party and supplier security assessments, including due diligence, ongoing assurance and contract requirement reviews
  • ● Contribute to incident preparedness activities (e.g. playbooks, table-top exercises) and support post-incident reviews from a GRC perspective
  • ● Champion consistent use of cyber GRC tools and data, helping to maintain accurate risk, control and issue registers