GRC Analyst II, ISO.

Accountabilities

GRC Advisory and Client Engagements: Support governance, risk management, compliance, cybersecurity, and advisory projects across multiple industries, helping clients strengthen their internal controls and achieve their risk and compliance objectives.
Risk Assessments and Control Evaluations: Assist with risk assessments, control testing, compliance reviews, and process evaluations to identify potential weaknesses, assess control effectiveness, and support the development of appropriate remediation strategies.
Documentation and Evidence Review: Review client policies, procedures, business processes, supporting evidence, and other documentation to evaluate alignment with applicable standards, regulatory requirements, and internal control expectations.
Testing and Analysis: Perform testing and analysis of business processes and controls, document results accurately, and identify risks, control deficiencies, and opportunities to improve operational effectiveness.
Reporting and Recommendations: Prepare workpapers, reports, summaries, and client deliverables that clearly communicate findings, risks, and practical recommendations for improvement.
Client and Team Collaboration: Communicate observations and recommendations to engagement team members and clients, collaborate with colleagues to meet project objectives, and contribute to the successful delivery of advisory engagements.
Regulatory and Industry Awareness: Maintain awareness of emerging cybersecurity threats, industry practices, regulatory developments, and relevant governance and compliance standards to support effective client service.
Professional Development: Build knowledge across governance, risk management, compliance, cybersecurity, auditing, and business processes through hands-on project experience, professional training, and collaboration with experienced team members.
Requirements
Educational Background: A bachelor's degree in cybersecurity, information systems, information technology, business, accounting, risk management, or a related discipline is preferred.
Relevant Experience: Approximately 0–3 years of experience in cybersecurity, information technology, risk management, compliance, auditing, consulting, accounting, or a related field.
Foundational GRC Knowledge: A basic understanding of governance, risk management, compliance, cybersecurity, audit principles, or internal controls, with an interest in developing deeper expertise in these areas.
Analytical and Problem-Solving Skills: The ability to analyze information, assess risks, evaluate processes, identify discrepancies, and contribute to practical recommendations.
Documentation and Reporting: Strong written communication and documentation skills, with the ability to organize information clearly, accurately record findings, and prepare professional reports and workpapers.
Communication Skills: Professional proficiency in written and spoken English, including the ability to communicate effectively with clients, colleagues, and senior team members.
Organization and Time Management: The ability to manage multiple priorities, meet deadlines, maintain accurate records, and deliver high-quality work across concurrent engagements.
Attention to Detail: A careful and methodical approach to reviewing documentation, testing controls, analyzing evidence, and identifying potential risks or inconsistencies.
Collaboration and Independence: The ability to work effectively within a team while taking ownership of assigned responsibilities and progressing tasks independently when appropriate.
Client Service Mindset: A professional, responsive, and solutions-oriented approach, with a willingness to understand client needs and contribute to positive engagement outcomes.
Technical Proficiency: Familiarity with Microsoft Office and standard business productivity tools, including applications used for documentation, reporting, and data analysis.
Learning Agility: Intellectual curiosity, adaptability, and a genuine interest in developing expertise across GRC, information security, regulatory compliance, and advisory services.
Location Requirement: Candidates must be based in Australia. The position is fully remote.
Benefits
Competitive Compensation: Annual salary ranging from AU$70,000 to AU$87,000, depending on experience, skills, qualifications, and other relevant factors.
Fully Remote Work: Enjoy the flexibility of working remotely, with opportunities to connect with colleagues in person when needed.
Flexible Workspace Options: Access WeWork subscriptions and local offices to support collaboration and provide alternatives to working from home.
Generous Annual Leave: Receive 30 days of annual leave, exceeding the Australian statutory requirement by 10 days.
Additional Paid Time Off: Benefit from an extra five days of paid leave during the firm's December year-end shutdown, alongside personal and carer's leave, parental leave, and volunteer days.
Salary Packaging and Novated Leasing: Access a vehicle novated leasing program and salary packaging options designed to help optimize take-home pay, subject to applicable eligibility and tax rules.
Performance-Based Bonus: Become eligible for an annual discretionary bonus recognizing individual contributions and performance.
Professional Development: Access tuition reimbursement, support for professional certifications, structured mentorship, and ongoing learning opportunities.
Technology of Your Choice: Choose a high-performance Mac or PC setup to support your productivity and working preferences.
Inclusive Workplace Culture: Join a collaborative and supportive environment that promotes diversity, equity, inclusion, employee resource groups, and employee wellbeing.
Career Advancement: Build a strong foundation for progression into more advanced GRC advisory, risk management, compliance, and cybersecurity consulting roles.
Meaningful Client Impact: Help organizations navigate complex risks, improve governance practices, and establish stronger foundations for sustainable business success.