Senior Cyber Security Analyst

LLL Australia is a demonstration of the incredible power of people, united in faith, working together towards a common purpose - to transform money into a force for good.

Established in 1921, LLL prides itself on providing investment products that are simple to operate, with no fees or charges. LLL provides loans and builds partnerships that support and transform the Lutheran Church of Australia (LCA) and associated entities such as schools, churches, congregations and aged care facilities.

Our mission is to provide business and financial support to the LCA, while providing excellent service to all customers and safeguarding the interests of investors.

What LLL offer:

• Purposeful and connected culture
• Diverse and inclusive workplace
• Flexible working arrangements
• Professional development in a growth environment
• Competitive salary and benefits, including free on-site parking.

About the Role:
Reporting to the Head of Information Technology, the Senior Cyber Security Analyst will play a critical role in protecting LLL's information assets and strengthening the resilience of its technology environment.

This is a hands-on senior position responsible for supporting and enhancing cyber security capabilities across security operations, vulnerability management, incident response, security monitoring and operational resilience. Working closely with internal stakeholders and external service providers, you will provide technical expertise, investigate security events, support cyber security initiatives and contribute to the continual improvement of security controls and technologies.

Success in this role will be measured through the effectiveness of security operations, timely threat detection and remediation, improved cyber security maturity, and the delivery of meaningful security insights that support the ongoing protection of LLL's people, systems and information assets.

Responsibilities:

• Monitor, investigate and respond to security alerts, incidents and emerging cyber threats.
• Lead vulnerability management activities, including prioritisation, remediation tracking and validation testing.
• Administer and enhance security technologies including SIEM, EDR/MDR, identity protection, Microsoft security platforms and vulnerability management tools.
• Coordinate threat hunting, vulnerability assessments and penetration testing activities, ensuring findings are effectively remediated.
• Assess, monitor and improve LLL's cyber security maturity, supporting the ongoing development of security controls, compliance obligations and organisational resilience.
• Support business continuity, disaster recovery and cyber incident response planning, testing and recovery activities.
• Partner with internal teams and external service providers to embed security best practices across technology solutions and projects.
• Develop and deliver cyber security awareness initiatives, training programs and educational activities to strengthen organisational capability and security culture.
• Prepare dashboards, metrics and reports that provide visibility of cyber security performance, threats and remediation activities.

About You:

• Strong hands-on experience with security technologies including SIEM, EDR/MDR, endpoint protection, vulnerability management, identity security platforms and Microsoft security technologies such as Entra ID, Conditional Access, MFA, Privileged Identity Management (PIM), Microsoft Defender, Data Loss Prevention (DLP) and Microsoft Purview capabilities.
• Experience investigating security incidents, analysing threats and coordinating remediation activities.
• Sound knowledge of contemporary cyber security practices across cloud, infrastructure, endpoint and identity environments.
• Strong understanding of information security control management, including control design, implementation, testing, effectiveness assessment, remediation tracking and ongoing assurance activities.
• Strong analytical and problem-solving skills, with the ability to assess complex technical issues and provide practical solutions.
• Excellent communication and stakeholder engagement skills, with the ability to work effectively across both technical and non-technical teams.
• Experience designing and delivering security awareness, training or cyber education programs that drive user engagement and improve security outcomes will be highly regarded.
• Tertiary qualifications in Cyber Security, Information Technology, Computer Science or a related discipline, together with relevant industry certifications such as CISSP, CCSP, CISM, Microsoft Security or equivalent experience (desirable).

Next Steps:

If you are ready to leverage your cyber security expertise to help protect critical information assets and contribute to a values-driven organisation committed to community growth and transformation, this could be your next career move!

Aboriginal and Torres Strait Islander Peoples are encouraged to apply.
To apply please click apply or call Brayden Mackay on 08 8216 3534 for a confidential discussion.