GRC Analyst I, SOC 2

Sensiba

7d•Hybrid

About The Position

We are seeking a motivated, detail‑oriented graduate or early‑career professional to join our GRC team as an entry‑level Analyst based in Australia, reporting to a Senior Analyst and playing an important part in our audit delivery process. Working across a varied portfolio of IT and information systems audit engagements — including but not limited to SOC 2, SOC 1, GDPR, HIPAA, CSA STAR, CDR, and GS 007 — the Analyst will apply critical thinking to review audit evidence against control requirements, communicate with clients to raise queries and request additional information, respond to QA review notes on audit files, and contribute to the preparation of high‑quality audit reports. Success in the role requires strong written and verbal communication with both internal and external stakeholders, a collaborative approach to working with team members, and a genuine willingness to learn on the job and apply constructive feedback to continually grow your technical and professional capability. Successful candidates will also bring strong analytical and problem-solving skills, and a willingness to challenge the status quo and contribute fresh ideas to improve processes.

Requirements

Analytical Thinking & Problem Solving - Applies strong analytical and critical thinking skills to break down complex issues, identify root causes, and deliver practical, well-reasoned solutions.
Innovation & Continuous Improvement - Challenges the status quo and brings fresh, forward-thinking ideas to improve processes, drive efficiency, and add value.
Risk and Control Awareness — A foundational understanding of risk and control concepts, including how controls are designed and operated to address business and technology risks.
Audit Principles — Working knowledge of core audit concepts such as risk assessment, materiality, independence, professional scepticism, and the sufficiency and appropriateness of evidence.
Technical Literacy — Familiarity with key IT and information security concepts relevant to modern audit engagements, including cyber security, cloud computing, virtualisation, and data centre operations.
Organisation and Delivery — Strong organisational skills, with the ability to manage multiple concurrent priorities, meet deadlines, and deliver consistently within a fast‑paced, deadline‑driven environment.
Interpersonal Effectiveness — Strong interpersonal skills, with the ability to build rapport, work effectively across teams, and engage confidently with clients and colleagues at all levels.
Communication — Excellent written and verbal communication skills, with the ability to interpret audit findings and convey them clearly to stakeholders of varying technical backgrounds, up to and including senior management.
Documentation Quality — Strong documentation skills, with the ability to articulate audit work clearly and accurately, and to a standard that withstands internal and external quality review.

Nice To Haves

Bachelor's or Master's degree in relevant field
Some knowledge of Cyber Security fundamentals, including a basic understanding of compliance frameworks, such as SOC1, SOC2, HIPPA, ISO 27001 and CDR

Responsibilities

Build and maintain strong client relationships, recognising that trusted, professional client engagement is central to success in this role and to the quality of our audit delivery.
Assess clients' control environments, including security policies and procedures, risk management and risk assessment documentation, and the design of controls across business applications, networks, operating systems, and broader technology infrastructure.
Review audit evidence and document testing conclusions clearly and accurately, ensuring working papers reflect the procedures performed, the evidence obtained, and the rationale supporting each conclusion.
Evaluate the design and operating effectiveness of controls based on the audit procedures performed, applying professional judgement to identify exceptions, deficiencies, and opportunities for improvement.
Deliver high‑quality audit workpapers and reports that meet internal methodology, professional standards, and the re‑performance threshold expected of supporting audit documentation.
Communicate findings and recommendations effectively to both internal and external stakeholders, engaging in a professional, competent, and constructive manner across all levels of the client and engagement team.

Benefits

competitive base salary
comprehensive benefits package
superannuation contributions
generous benefits
competitive compensation
professional advancement opportunities
Retirement & Financial Planning Support – 401(k) with match, financial wellness programs.
Generous Paid Time Off – Vacation, sick time, holidays, parental leave and volunteer days.
Flexible Work Arrangements – Hybrid or remote options, flexible hours.
Performance-Based Bonus – Recognition for your contributions through discretionary bonuses.
Professional Development Opportunities – Tuition reimbursement, certifications, mentorship.
Career Growth & Internal Mobility – Clear paths for advancement and role transitions.
Inclusive & Supportive Culture – DEI initiatives, employee resource groups, wellness programs.