Skip to main content
Post your resume and find your next job on Indeed!

it security specialist jobs

Sort by: -
    • Support ad-hoc compliance projects and security initiatives as needed.
    • Collaborate with IT, security, and business teams to implement and maintain effective…
    • Experience in performing security threat and risk assessments and delivering projects relating to security strategy, governance, security architecture and…
    • Analyze IT specifications to assess security risks.
    • Serve as a security expert and conduct training when needed.
    • Act on privacy breaches and malware threats.
    • Investigating and responding to security alerts raised by Users.
    • A high level understanding of mobile, network and operating system security controls.
  • View similar jobs with this employer
    • This multifaceted role involves the end-to-end management of security controls—from initial selection and design to long-term operational oversight.
  • View similar jobs with this employer
    • Identify emerging cyber security risks and deploy appropriate security measures.
    • Report, investigate and document security incidents.
    • Strong problem-solving capabilities, including identifying IT control issues and risks, and developing practical solutions to enhance system security and…
    • 3 -4 years of p roven experience in IT security operations or cyber security incident response.
    • You will work with a wide range of security tools and…
    • Supporting secure environments including Zone 4 and Zone 5 facilities , with the opportunity to expand knowledge across broader security domains including…
    • Conducts regular audits to ensure that systems are being operated securely, and information systems security policies and procedures are being implemented as…
    • Experience with on-premises, cloud-based security and network security technologies with cloud security credentials is a must.
    • Demonstrated working to expert knowledge of relevant cyber security frameworks and standards, including the Australian Government Information Security Manual (…
    • Strong understanding of endpoint security technologies and modern security controls.
    • Knowledge of security frameworks, compliance standards, and security…
    • Monitor & triage security alerts, analyse logs, investigate suspicious activity.
    • Familiarity with security frameworks such as MITRE ATT&CK, Zero Trust, and…
    • Review and strengthen our cyber security risk register – making it meaningful, accurate, and fit for purpose.
    • Collaborate with stakeholders to ensure frameworks…

People also searched:

woolworths
work from home
casual
cyber security
entry level it
information technology
it entry level
it support
no experience
no experience required

Job Post Details

IT Risk & Controls Specialist - job post

BGIS
2.9 out of 5 stars
Australia
Full-time
You must create an Indeed account before continuing to the company website to apply

Job details

Job type

  • Full-time

Location

Australia

Benefits

Pulled from the full job description

  • Referral program
  • Employee assistance program
  • Paid volunteer leave

Full job description

IT Risk and Controls Specialist

Location: This role is open to applicants across Australia
Company: BGIS
Employment Type: Full Time

About the Role

We are seeking a highly capable IT Risk & Compliance Specialist to strengthen and take ownership of our IT General Controls (ITGC) and Sarbanes-Oxley (SOX) compliance program across our APAC operations. This role requires an individual who can independently run and manage the SOX compliance and ITGC testing function at BGIS, ensuring a robust and sustainable control environment.

This is a critical, stakeholder-facing position that works closely with senior leadership, external auditors, and cross-functional teams. You will play a key role in driving compliance outcomes, influencing control owners, and ensuring clear, effective communication of risk and control matters.

In this role, you will monitor control effectiveness, lead audit engagement activities, and drive continuous improvement in our compliance posture while operating with a high degree of autonomy.

Key Responsibilities

Compliance Monitoring & Control Testing

  • Monitor and enforce adherence to internal IT policies and external regulatory requirements including SOX and ISO 27001
  • Design, review, and execute IT control testing procedures to assess effectiveness and identify control gaps
  • Maintain comprehensive documentation of control testing activities, results, and evidence for audit readiness
  • Communicate audit observations, control deficiencies, and risk findings to stakeholders with clear, actionable recommendations
  • Develop and recommend corrective and preventive action plans that are practical, cost-effective, and aligned with business objectives
  • Track remediation activities resulting from internal and external audit findings, ensuring timely closure with appropriate evidence
  • Collaborate with IT, security, and business teams to implement and maintain effective control environments
  • Provide guidance and training to control owners on proper control execution, documentation standards, and testing methodologies
  • Facilitate communication between technical and non-technical stakeholders to ensure shared understanding of compliance requirements
  • Identify opportunities to streamline audit processes, improve control automation, and enhance compliance reporting
  • Contribute to the development and maintenance of the IT risk register and compliance dashboard metrics
  • Stay current with evolving regulatory requirements, industry standards, and audit best practices
  • Support ad-hoc compliance projects and security initiatives as needed
What We're Looking For

Essential Experience

  • 3+ years of experience in IT audit, IT controls testing, or information security compliance roles
  • Strong, hands-on experience with SOX compliance, including Sarbanes-Oxley Section 404 ITGC testing
  • Proven ability to independently lead and own SOX compliance and ITGC testing activities end-to-end
  • Demonstrated experience with IT control frameworks such as SOX, COBIT, COSO, or ITIL
  • Proven ability to conduct control walkthroughs, design test procedures, and document testing evidence

Stakeholder & Communication Capability

  • Strong stakeholder management experience, with the ability to confidently engage and influence senior leadership, external auditors, and cross-functional teams
  • Excellent written and verbal communication skills, including the ability to translate technical concepts into clear business language
  • Experience preparing and delivering clear, concise reporting on risk, controls, and compliance outcomes

Technical & Professional Skills

  • High proficiency in Microsoft Excel, Word, and PowerPoint
  • Strong analytical skills with attention to detail and a proactive approach to problem-solving
Qualifications

Required

  • Bachelor’s degree in Information Systems, Computer Science, Accounting, Information Security, or related field

Certifications (Preferred or In Progress)

  • Certified Information Systems Auditor (CISA)
  • Certified Internal Auditor (CIA)
  • ISO 27001 Lead Auditor (LA) or Lead Implementer (LI)
  • CISSP, CISM, CRISC, or other relevant cybersecurity certifications
Why Join BGIS?

Key Benefits Include:

✔ Spot recognition vouchers and $2,000 employee referral bonus
✔ Access to Flare for retailer, utility and lifestyle discounts
✔ Fitness Passport for you and your family
✔ AFR Best Places to Work 2024 & 2025
✔ Winner – Inspiring Workplaces Award 2025
✔ WORK180 Employer of Choice for Women
✔ WGEA Compliance Certification
✔ 2 paid volunteer days annually
✔ Career mobility and internal progression pathways
✔ Leadership development programs
✔ Health & wellbeing support including EAP

BGIS is committed to fostering an inclusive workplace where diverse perspectives are welcomed and supported.

BGIS is an equal opportunity employer. We strongly encourage applications from women, Aboriginal and Torres Strait Islander peoples, LGBTQIA+ individuals and people from culturally diverse backgrounds.

Let Employers Find YouUpload Your Resume