search Browse Jobs
GRC AnalystHays · Melbourne, Victoria, Australia
Hays logo

Hays

company page ↗ Visa Sponsoring Company

GRC Analyst

✓ This company has sponsored visas before. The posting doesn't say so, but it's still worth applying.

🗓️ Posted 2026-09-07 Melbourne, Victoria, Australia Full-time Hybrid ICT
💰 Salary Not shared 📊 Market A$12,408/mo

About the Company

Join a well-established Australian organisation undergoing an exciting cyber security uplift journey. With a strong focus on governance, risk management, and compliance, this organisation is committed to strengthening its security posture and embedding best-practice cyber security frameworks across the business.

About the Job

As the Security Governance, Risk & Compliance (GRC) Analyst, you will play a key role in supporting and enhancing the organisation's cyber security framework. Working closely with cyber security, technology, and business stakeholders, you will drive governance, risk, and compliance activities while ensuring alignment with industry standards and regulatory obligations.

Role & Responsibilities

  • ● Supporting the delivery of a multi-year cyber security uplift program.
  • ● Developing and maintaining security policies, standards, and control documentation.
  • ● Conducting risk assessments and maintaining security risk registers.
  • ● Coordinating internal and external security audits.
  • ● Monitoring compliance with security frameworks including ISO 27001, ISM, and Essential Eight.
  • ● Managing remediation activities arising from audits, risk assessments, and security incidents.
  • ● Supporting vendor risk assessments and third-party security reviews.
  • ● Preparing cyber security reports and metrics for senior leadership and governance committees.
Show 1 more
  • ● Providing security guidance to business and technology teams.

Requirements

Education

  • ● Relevant tertiary qualifications in Information Technology, Cyber Security, or a related discipline.

Certifications

  • ● Industry certifications such as CISSP, CISM, or CRISC will be highly regarded

Experience

  • ● Experience in Cyber Security Governance, Risk & Compliance roles.
  • ● Experience supporting Information Security Management Systems (ISMS).
  • ● Experience working within regulated or governance-focused environments.

Skills

  • ● Strong knowledge of security frameworks such as ISO 27001, ISM, and Essential Eight.
  • ● Proven experience coordinating audits, compliance activities, and risk assessments.
  • ● Strong understanding of security controls, vulnerability management, and remediation tracking.
  • ● Excellent communication and stakeholder management skills, with the ability to translate technical concepts for business audiences.

Benefits

  • ● Opportunity to contribute to enterprise-wide cyber security initiatives.
  • ● Exposure to executive stakeholders and strategic security programs.
  • ● Collaborative and supportive team environment.
  • ● Career development opportunities within a growing cyber security function.
  • ● Competitive remuneration package and flexible working arrangements.