Risk Management Analyst

About the role

The Risk Management Analyst will join Cubic's Information Security team to provide security compliance support for production transaction processing environments. You will evaluate security controls, ensure adherence to corporate policies, and coordinate audit activities across global transportation and defense solutions.

Key responsibilities

• Act as Subject Matter Expert for security risk assessment methodology, policy, and processes.
• Facilitate all security audit operations, including scheduling, vendor coordination, and stakeholder communication.
• Coordinate with internal and external auditors to complete PCI‑DSS, ISO 27001, SOC 1, SOC 2, Australian Essential 8, and NZ‑ISM audits.
• Lead design and control reviews to maintain continuous compliance with security standards.
• Manage security review processes for solutions, documenting and communicating any non‑compliant areas.
• Identify and report significant information security risks across applications, networking, data centres, cloud services, physical infrastructure, and third‑party vendors.

Required profile

• Experience working within an information security team, providing compliance support for transaction processing systems.
• Ability to evaluate security posture against established policies and controls.
• Proven capability to plan and scope IT compliance evaluation programs.
• Comfort operating with limited supervision while exercising discretionary decision‑making authority.

Required skills

• PCI‑DSS compliance
• ISO 27001 certification standards
• SOC 1 and SOC 2 audit frameworks
• Australian Essential 8 controls
• New Zealand ISM (NZ‑ISM) requirements
• Security risk assessment methodology
• Audit coordination and stakeholder management