Risk Analyst jobs in Australia
EY Manager - EY Defence Vetting Risk Consulting Australia
Share
As a Manager in the External Security Vetting team, you'll lead a team of Vetting Analysts, handling complex personal security clearance processes across various security levels, such as Baseline, Negative Vetting Level 1, Negative Vetting Level 2, and Positive Vetting.
In this role, you will have supervisory responsibility for a high performing team of vetting analysts, assessing clearance cases, you will leverage your experience in vetting to help build the capability within your team. You will have attention to detail and the ability to manage a complex process. You will be part of the Quality Assurance process, enforcing stringent quality controls on Personal Security Files (PSFs), and be able to document sound, data-driven advice on clearance outcomes.
- Process security clearances meticulously, strictly adhering to the Protective Security Policy Framework (PSPF) and EY best practices.
- Conduct thorough Quality Assurance checks on Personal Security Files (PSFs) ensuring their alignment with standard procedures and the PSPF.
- Effectively manage caseload and execution.
- Coach, mentor and counsel Analysts and Senior Analysts, as well new team members to help us grow our team
hat we’re looking for
Here’s our ‘wish list’ but don’t worry if you don’t tick all the boxes. We’re interested in your strengths, what you want to learn, and how far you want to go.
- Extensive vetting experience (essential) in Government or similar high-security environments including conducting face to face interviews as required by the clearance type.
- A minimum Negative Vetting Level 1, with the opportunity to upgrade to Negative Vetting 2 as required
- Certificate IV in Government (Personnel Security Vetting)
- Leadership: Experience in leading a team with the drive to mentor and lead a team of enthusiastic security analysts.
- Attention to Detail: The meticulous scrutiny of extensive data and identification of potential security risks.
- Quality Assurance: Firm commitment to uphold high-quality standards in vetting processes and documentation, strictly adhering to the PSPF.”
hat we can offer you
- Explore how a career at EY is yours to build at
- Discover how, when and where you can work at
- Learn about our commitment to DE&I at
- Discover the various ways our benefits can cater to your needs, across wellness,
paid parental leave at
- We offer a competitive salary which is open to negotiation pending on skills and
.
Building a better working world
Our preferred applicant will be required to undertake employment screening by EY or our external third-party provider.
© 2025 Ernst & Young Australia. A member firm of Ernst & Young Global Limited. All Rights Reserved. Liability limited by a scheme approved under Professional Standards Legislation.
These jobs might be a good fit
EY Senior Consultant - Market Research Data Analyst Programmer Australia, New South Wales, Sydney
Share
Technology Consulting
Your key responsibilities
Leads the design, build, and deployment of identity and access management controls and governance program that is compliant with enterprise security standards and integrated with enterprise access administration infrastructure. Works closely with senior leadership and other IT teams to align strategies and projects with business objectives.
Leads and oversees the implementation of changes to department policies and procedures to meet changing business needs and to achieve department objectives. Identifies opportunities for continuous improvement.
Serves as a point of escalation for complex issues that may require management intervention. Analyzes the security impact of complex requests or incident tickets escalated by the team and either provides resolution or escalates to higher management depending on the criticality. Assesses and immediately notifies leadership of security issues or quality control events that may have an impact on business operations.
Works closely with external auditors to represent Vanguard and respond to audit findings. Ensures completeness and accuracy of responses and evidencing.
Maintains an active understanding of, and contributes to, the broader access management and information security discipline. Serves as thought leader across the enterprise and with external partners.
Participates on vendor software evaluation teams to analyze the security administration features and impacts of each package or release. May help define requirements, log issues and test upgrades and new releases.
Participates in special projects and performs other duties as assigned.
Collaborate with IT and business teams to design, implement and maintain robust internal controls that address IT risks and safeguard organizational assets.
Support internal and external audits by assisting with risk mitigation based on audit findings, ensuring all control documentation is accurate and up-to-date.
Proactively identify potential gaps in IT controls and work with relevant teams to address weaknesses, enhancing the overall security posture of the organization.
Assist with the development of risk management frameworks and contribute to the creation of policies aimed at strengthening the organization’s internal controls and mitigating IT-related risks.
Skills and attributes for success
A team player with strong analytical, communication and interpersonal skills
Constantly updating yourself about new technologies in the market
A winning personality and the ability to become a trusted advisor to the stakeholders
To qualify for the role, you must have
Minimum 8 years of related work experience, including at least 5 years in risk management, controls assessment, or cybersecurity governance.
Bachelor’s degree (B.E./B.Tech) in Computer Science or IT, or Bachelor’s in Computer Applications (BCA) from a recognized institution.
Supervisory experience preferred, with the ability to mentor and guide junior staff.
Proficiency in assessing and testing IT and cybersecurity controls using frameworks such as NIST, ISO 27001, and COBIT.
Hands-on experience with control gap analysis, risk assessment, and audit remediation processes.
Familiarity with IAM tools (SailPoint, Okta, CyberArk), governance platforms (Archer, ServiceNow), and privileged access management (PAM).
Strong understanding of international cybersecurity regulations and compliance standards (e.g., SOX, GDPR, HIPAA).
Detail-oriented with strong analytical and organizational abilities, capable of identifying security risks and implementing improvements.
Excellent technical writing, documentation, and communication skills, with the ability to present findings to stakeholders.
Problem-solving, conceptual thinking, and process improvement mindset, with a proactive approach to security enhancements.
Relevant certifications preferred: Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or Certified Information Systems Security Professional (CISSP).
Ideally, you’ll also have
Strong verbal and written communication, facilitation, relationship-building, presentation and negotiation skills.
Be highly flexible, adaptable, and creative.
Comfortable interacting with senior executives (within the firm and at the client)
What we look for
Strong teamwork, work ethic, product mindset, client centricity and a relentless commitment to EY values.
We offer a competitive remuneration package where you’ll be rewarded for your individual and team performance. Our comprehensive Total Rewards package includes support for flexible working and career development, and with FlexEY you can select benefits that suit your needs, covering holidays, health and well-being, insurance, savings and a wide range of discounts, offers and promotions. Plus, we offer:
Support, coaching and feedback from some of the most engaging colleagues around
Opportunities to develop new skills and progress your career
The freedom and flexibility to handle your role in a way that’s right for you
These jobs might be a good fit
EY Senior Consultant - Digital Risk Australia, New South Wales, Sydney
Share
Senior Consultant – Digital Risk
As a Senior Consultant of Digital Risk in the Risk Consulting sub-service line, you’ll be a working as a part of a dynamic team dedicated to protecting and enhancing digital risks and compliance health of some of the world's leading organisations. You will be helping our clients with managing the risks and challenges of a rapidly changing digital landscape, ensuring compliance with evolving regulations, and identifying opportunities for innovation and continuous improvement to deliver valuable outcomes.
Your key responsibilities
- Deliver broad ranging Risk Consulting engagements including enterprise risk management, business processes and controls advisory, ERP advisory (including SAP), programs and project risk management, data governance, resilience and technology-enabled Governance, Risk and Compliance solutions.
- Deliver digital and IT risk engagements in support of Internal Audits – including evaluating the design and operating effectiveness of IT controls (e.g. application & IT general controls), as well as enabling the Internal Audit practice to conduct data-driven audits.
- Collaborate with other team members to plan the engagement which include developing scope of works and a risk and control matrix; and other planning documents.
What we look for
To be considered for this role you must have:
- At least 3 years’ of relevant experience in internal or external audit and/or risk management from an IT, financial and/or operations.
- Keen problem-solving skills and business acumen, including time management, spoken and written communication, and a commitment to continuous learning.
- Proven ability to manage stakeholders and relationships effectively.
Ideally, you’ll also have the skills and attributes below but don’t worry if you don’t tick all the boxes. We’re interested in your aptitude, attitude and willingness to learn.
- A curious mindset and a ‘have a go’ attitude.
- A logical and structured approach to challenges, projects and documentation.
What we offer you
At EY, we’ll fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn .
- Career development: At EY, your career is yours to shape! We’ll develop you with future-focused skills and equip you with world-class experiences
- Flexible work arrangements: Our flexible work policies empower you to balance your professional and personal life, fostering a culture of trust and autonomy.
- A comprehensive benefits package : From a yearly wellness incentive, to access to additional 8 weeks of flex leave per year, and family-friendly policies, including 26 weeks of gender-neutral paid parental leave, we cater to your diverse needs to help you thrive both personally and professionally
- Salary: We offer a competitive salary which is open to negotiation pending on skills and experience.
Acknowledgement of Country
Our preferred applicant will be required to undertake employment screening by EY or our external third-party provider.
© 2025 Ernst & Young Australia. A member firm of Ernst & Young Global Limited. All Rights Reserved. Liability limited by a scheme approved under Professional Standards Legislation.
These jobs might be a good fit
EY Consultant - Security Operations Analyst Cyber Australia, Victoria, Melbourne
Share
Consultant - Security Operations Centre - Cyber Security
You’ll work with a valued based team of amazing Technologists who are always growing, learning, and adapting, in and out of the office. We’re looking to recruit a Security Analyst at the Consultant level.
This is a hybrid position based in Naarm – Melbourne.
Your key responsibilities
- Monitor and respond to security alarms\alerts\incidents in Security tools such as SIEM, EDR and NDR
- Escalate true positive detections to Senior Security Analysts, SOC Engineering, and/or customers
- Manage client requests\tickets
- Deliver services according to service targets (SLA’s) and quality standards
- Follow ITIL practices regarding service request, incident, problem and change management
- Contribute to SOC continuous improvement program
- Communicate effectively with customers, teammates, and management.
Skills and attributes for success
- Experience within Information Security, especially in a security operations and vulnerability discovery OR information operations/incident role
- Strong working knowledge of at least three of the following security tools: host-based antivirus, anti-spam gateway solutions, firewalls, IDS/IPS, server and network device hardening, data loss prevention, forensics software, vulnerability management, website security
- Experience utilizing security tools such as: Splunk, Sentinel, Crowdstrike, Microsoft Defender and ServiceNow
- Knowledge of general security concepts and methods
Ideally, you’ll also have the skills and attributes below but don’t worry if you don’t tick all the boxes. We’re interested in your aptitude, attitude and willingness to learn.
- Experience with Windows, Linux, UNIX, any other major operating systems.
- Ability to mesh sound technical and security practices to problem solving
- Demonstrate in-depth technical capabilities and professional knowledge.
- Additional certifications and training preferred in the following areas: Network Security certifications (CISSP, Security+, SANS, ISACA, Vendor Certificates), Project Management training/certification, and Quality Management (ITIL, Six Sigma, TQM, etc.) training/certification
What we offer you
At EY, we’ll fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn .
- Career development: At EY, your career is yours to shape! We’ll develop you with future-focused skills and equip you with world-class experiences
- Flexible work arrangements: Our flexible work policies empower you to balance your professional and personal life, fostering a culture of trust and autonomy.
- A comprehensive benefits package : From a yearly wellness incentive, to access to additional 8 weeks of flex leave per year, and family-friendly policies, including 26 weeks of gender-neutral paid parental leave, we cater to your diverse needs to help you thrive both personally and professionally
- Salary: We offer a competitive salary which is open to negotiation pending on skills and experience.
Acknowledgement of Country
Our preferred applicant will be required to undertake employment screening by EY or our external third-party provider.
© 2025 Ernst & Young Australia. A member firm of Ernst & Young Global Limited. All Rights Reserved. Liability limited by a scheme approved under Professional StandardsLegislation.
These jobs might be a good fit
EY Senior Consultant - Digital Risk Consulting Australia, New South Wales, Sydney
Share
As our Senior Consultant you will play a pivotal role in assisting clients in employing effective information systems, resources, and controls to maximize efficiencies while minimizing risk.
Your key responsibilities
- You will operate as a fieldwork leader to assist clients in employing proper information systems, resources, and controls to maximize efficiencies and minimize risk.
- You can expect to work with client personnel to analyse, evaluate, and enhance information systems facilitating the business internal control process
- You will assist clients and other Technology Risk professionals in performing information technology control engagements.
Skills and attributes for success
- Assist in the coordination, planning and delivery of various Technology Risk engagements including Information Technology (IT) Internal Audit, Organisational Resilience, IT Controls Assessments and IT Risk Management
- A passion for understanding technology and helping organisations manage the risks associated with the use of technology.
- Collaborate with other members of the engagement team to plan the engagement and develop work program timelines, risk assessments, and other planning documents.
- Work with the engagement team to document the business processes dependent on information technology
- Serve as a fieldwork leader by directing the daily progress of fieldwork, informing supervisors of engagement status, and managing staff performance
- Demonstrate and apply a thorough understanding of complex information systems.
- Use knowledge of the current IT environment and industry IT trends to identify the engagement and client service issues, and communicate this information to the engagement team and client management through written correspondence and verbal presentations
- Demonstrate and apply strong project management skills
Ideally, you’ll also have the skills and attributes below but don’t worry if you don’t tick all the boxes. We’re interested in your aptitude, attitude and willingness to learn.
- A passion for emerging technologies and working within a team to advise clients on how to manage IT risks and accelerate performance.
- The ability to inspire teamwork and responsibility with engagement team members and use current technology and tools to enhance the effectiveness of deliverables and services
What we offer you
At EY, we’ll fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn .
- Career development: At EY, your career is yours to shape! We’ll develop you with future-focused skills and equip you with world-class experiences
- Flexible work arrangements: Our flexible work policies empower you to balance your professional and personal life, fostering a culture of trust and autonomy.
- A comprehensive benefits package: From a yearly wellness incentive, to access to additional 8 weeks of flex leave per year, and family-friendly policies, including 26 weeks of gender-neutral paid parental leave, we cater to your diverse needs to help you thrive both personally and professionally
- Salary: We offer a competitive salary which is open to negotiation pending on skills and experience.
Acknowledgement of Country
Our preferred applicant will be required to undertake employment screening by EY or our external third-party provider.
© 2025 Ernst & Young Australia. A member firm of Ernst & Young Global Limited. All Rights Reserved. Liability limited by a scheme approved under Professional Standards Legislation.
These jobs might be a good fit
EY Consultant Senior - Technology Risk Financial Services Australia, New South Wales, Sydney
Share
Consultant and Senior Consultant - Technology Risk - Financial Services
As our Consultant or Senior Consultant, you’ll use your passion for Technology Risk with Financial Services experience, to join our diverse team. You will focus on providing IT Risk management services to our financial services clients. You will work with our banking, insurance, and wealth management clients to develop and deliver exceptional Technology Risk Services.
All while maintaining work-life balance through hybrid working.
Your key responsibilities
- Support financial audit teams by identifying financial reporting related IT risks, evaluating ITGC design and operating effectiveness and testing application controls
- Control assurance reporting, including GS007, ASAE3150, SOC1, SOC2 etc.
- Provide a broad range of Technology risk services, relating to regulatory compliance, e.g. regulatory compliance services to CPS 234 and CPS 230
- Identify, evaluate and manage risks derived from an organisation engaging with a third party
Skills and attributes for success
- Financial services industry-based knowledge and experience.
- Knowledge of, and experience in, IT audit supporting external audits, controls assurance reports, internal auditing, IT risk management strategies and techniques
- A result orientated and commercially client focused mindset
- Use knowledge of the current IT environment and industry IT trends to identify the engagement and client service issues.
Ideally, you’ll also have the skills and attributes below but don’t worry if you don’t tick all the boxes. We’re interested in your aptitude, attitude and willingness to learn.
- A passion for emerging technologies and willingness to work within a team to advise clients on how to manage IT risks.
- Strong communication and interpersonal skills.
- Ability to work independently and as part of a team in a fast-paced environment with competing priorities.
- Comfort to take on unfamiliar tasks and regularly learn new skills.
- Maintain awareness of current industry IT trends and regulations.
What we offer you
At EY, we’ll fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn .
- Career development: At EY, your career is yours to shape! We’ll develop you with future-focused skills and equip you with world-class experiences
- Flexible work arrangements: Our flexible work policies empower you to balance your professional and personal life, fostering a culture of trust and autonomy.
- A comprehensive benefits package : From a yearly wellness incentive, to access to additional 8 weeks of flex leave per year, and family-friendly policies, including 26 weeks of gender-neutral paid parental leave, we cater to your diverse needs to help you thrive both personally and professionally
- Salary: We offer a competitive salary which is open to negotiation pending on skills and experience.
Our preferred applicant will be required to undertake employment screening by EY or our external third-party provider.
© 2025 Ernst & Young Australia. A member firm of Ernst & Young Global Limited. All Rights Reserved. Liability limited by a scheme approved under Professional Standards Legislation.
These jobs might be a good fit
EY Data Analyst Australia, New South Wales, Sydney
Share
Data Analyst
As our Data Analyst, you will join a team of multidisciplinary professionals in a role that focuses on collecting, combining, and exploring data to create insights that support our clients with their decision-making processes. As part of our team, you will build solutions that utilise our clients’ data to enable insights within the accounting, finance, governance, and regulatory space and pursue automation in the process to create efficiencies.
Your key responsibilities
Everything you’ll do will come back to providing exceptional analytics for our clients. Colleagues and clients from diverse backgrounds will look to you for answers, so you will be a key contact when it comes to designing, building, and understanding complex data analytics.
As you build your knowledge and experience, you’ll become a credible advisor, influencing clients and engagement teams on resolutions that will impact future analytics solutions, delivery, and processes. In this role you will
- Consistently deliver exceptional client service solutions to allow our clients to gain greater insight into their data and the value that data analytics can bring to an organisation.
- Transform how we deliver our services to the client; exploring new ways of doing business and using technology to improve effectiveness and efficiency.
- Be an active problem solver performing advanced financial analysis and reporting in complex business areas, while building technical competence.
- Develop business acumen and a comfort level in designing solutions that address client inquiries and emerging issues, including industry practices, and new technologies.
- Tertiary education qualification(s) in Business, IT or STEM related disciplines.
- One to two years of experience in a data and analytics role, or similar.
- Advanced proficiency in Programming, Analytics, and Data Visualisation.
Ideally, you’ll have the skills and attributes below but don’t worry if you don’t tick all the boxes. We’re interested in your aptitude, attitude and willingness to learn.
- Excellent communication skills, an innovative mindset and an understanding of a professional working environment.
- Experience with three or more data analysis tools including, but not limited to SQL, Python, JavaScript, Power BI/DAX, and Tabular Editor.
- Experience with developing data visualisation dashboards for communication of anomalies, patterns and trends, using structured and unstructured data sources.
- Background in cloud computing such as the Microsoft Azure platform.
What we offer you
At EY, we’ll fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn .
- Career development: At EY, your career is yours to shape! We’ll develop you with future-focused skills and equip you with world-class experiences
- Flexible work arrangements: Our flexible work policies empower you to balance your professional and personal life, fostering a culture of trust and autonomy.
- A comprehensive benefits package : From a yearly wellness incentive, to access to additional 8 weeks of flex leave per year, and family-friendly policies, including 26 weeks of gender-neutral paid parental leave, we cater to your diverse needs to help you thrive both personally and professionally
Acknowledgement of Country
Our preferred applicant will be required to undertake employment screening by EY or our external third-party provider.
© 2025 Ernst & Young Australia. A member firm of Ernst & Young Global Limited. All Rights Reserved. Liability limited by a scheme approved under Professional Standards Legislation.
These jobs might be a good fit
As a Manager in the External Security Vetting team, you'll lead a team of Vetting Analysts, handling complex personal security clearance processes across various security levels, such as Baseline, Negative Vetting Level 1, Negative Vetting Level 2, and Positive Vetting.
In this role, you will have supervisory responsibility for a high performing team of vetting analysts, assessing clearance cases, you will leverage your experience in vetting to help build the capability within your team. You will have attention to detail and the ability to manage a complex process. You will be part of the Quality Assurance process, enforcing stringent quality controls on Personal Security Files (PSFs), and be able to document sound, data-driven advice on clearance outcomes.
- Process security clearances meticulously, strictly adhering to the Protective Security Policy Framework (PSPF) and EY best practices.
- Conduct thorough Quality Assurance checks on Personal Security Files (PSFs) ensuring their alignment with standard procedures and the PSPF.
- Effectively manage caseload and execution.
- Coach, mentor and counsel Analysts and Senior Analysts, as well new team members to help us grow our team
hat we’re looking for
Here’s our ‘wish list’ but don’t worry if you don’t tick all the boxes. We’re interested in your strengths, what you want to learn, and how far you want to go.
- Extensive vetting experience (essential) in Government or similar high-security environments including conducting face to face interviews as required by the clearance type.
- A minimum Negative Vetting Level 1, with the opportunity to upgrade to Negative Vetting 2 as required
- Certificate IV in Government (Personnel Security Vetting)
- Leadership: Experience in leading a team with the drive to mentor and lead a team of enthusiastic security analysts.
- Attention to Detail: The meticulous scrutiny of extensive data and identification of potential security risks.
- Quality Assurance: Firm commitment to uphold high-quality standards in vetting processes and documentation, strictly adhering to the PSPF.”
hat we can offer you
- Explore how a career at EY is yours to build at
- Discover how, when and where you can work at
- Learn about our commitment to DE&I at
- Discover the various ways our benefits can cater to your needs, across wellness,
paid parental leave at
- We offer a competitive salary which is open to negotiation pending on skills and
.
Building a better working world
Our preferred applicant will be required to undertake employment screening by EY or our external third-party provider.
© 2025 Ernst & Young Australia. A member firm of Ernst & Young Global Limited. All Rights Reserved. Liability limited by a scheme approved under Professional Standards Legislation.
These jobs might be a good fit
