GRC Analyst II, ISO
About The Position
The GRC Analyst supports client engagements that help organizations strengthen governance, risk management, compliance, and information security programs. The role contributes to projects involving external audit risk assessments, control evaluations, compliance initiatives, process reviews, and other advisory services. Working with team members and engagement leadership, the analyst assesses risks, evaluates controls, reviews documentation, identifies improvement opportunities, and supports clients’ GRC objectives. This position offers exposure to multiple service offerings, industries, and regulatory environments while developing expertise in governance, risk management, compliance, cybersecurity, and business processes. Candidates must be based in Australia.
Requirements
- Foundational understanding of governance, risk management, compliance, cybersecurity, or audit concepts.
- Strong analytical and problem-solving skills.
- Professional proficiency in written and spoken English, with the ability to communicate clearly and effectively with clients, colleagues, and leadership.
- Ability to organize information and document work clearly and accurately.
- Ability to manage multiple priorities and meet deadlines.
- Strong attention to detail.
- Professional curiosity and willingness to learn.
- Ability to work independently and collaboratively in a team environment.
- Strong client service mindset.
- Proficiency with Microsoft Office and business productivity tools.
- 0–3 years of relevant experience in cybersecurity, information technology, risk management, compliance, audit, consulting, accounting, or a related discipline.
- Must be based in Australia.
Nice To Haves
- Bachelor’s degree in Cybersecurity, Information Systems, Information Technology, Business, Accounting, Risk Management, or a related field.
Responsibilities
- Support governance, risk, compliance, and advisory engagements across various industries and client environments.
- Review documentation, policies, procedures, and supporting evidence.
- Assist with risk assessments, control evaluations, and compliance-related activities.
- Perform testing, analysis, and documentation of processes and controls.
- Identify observations, risks, improvement opportunities, and remediation recommendations.
- Prepare workpapers, reports, summaries, and client deliverables.
- Communicate findings and recommendations to engagement team members and clients.
- Develop understanding of governance, risk management, compliance, cybersecurity, and business process concepts.
- Collaborate with teammates to support successful engagement delivery.
- Maintain awareness of emerging industry trends, risks, and regulatory developments.
- Participate in professional development and training opportunities.
Benefits
- 30 days of annual leave, plus 5 days of paid leave for the firm's December year-end shutdown.
- Personal/carer's leave, parental leave, and volunteer days.
- Salary packaging and a novated vehicle leasing program.
- Flexible remote work, with WeWork subscriptions and access to local offices for collaboration.
- Annual discretionary performance-based bonus program.
- Tuition reimbursement, support for professional certifications, and structured mentorship.
- Choice of a high-spec Mac or PC setup.
- DEI initiatives and employee resource groups.
- Comprehensive wellness programs.
- Competitive compensation and professional advancement opportunities.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
Education Level
No Education Listed
