arrow_back Back to Dashboard search Browse Jobs
Hays logo

Hays

GRC Analyst

🗓️ Posted 2026-09-07 Melbourne, Victoria, Australia Full-time Hybrid ICT

Company shared salary

NA

Market rate

A$12,408/mo (A$148,897/yr)

Based on similar roles (title + domain + location).

About the Company

Join a well-established Australian organisation undergoing an exciting cyber security uplift journey. With a strong focus on governance, risk management, and compliance, this organisation is committed to strengthening its security posture and embedding best-practice cyber security frameworks across the business.

About the Role

As the Security Governance, Risk & Compliance (GRC) Analyst, you will play a key role in supporting and enhancing the organisation's cyber security framework. Working closely with cyber security, technology, and business stakeholders, you will drive governance, risk, and compliance activities while ensuring alignment with industry standards and regulatory obligations.

Responsibilities

  • ● Supporting the delivery of a multi-year cyber security uplift program.
  • ● Developing and maintaining security policies, standards, and control documentation.
  • ● Conducting risk assessments and maintaining security risk registers.
  • ● Coordinating internal and external security audits.
  • ● Monitoring compliance with security frameworks including ISO 27001, ISM, and Essential Eight.
  • ● Managing remediation activities arising from audits, risk assessments, and security incidents.
  • ● Supporting vendor risk assessments and third-party security reviews.
  • ● Preparing cyber security reports and metrics for senior leadership and governance committees.
  • ● Providing security guidance to business and technology teams.

Requirements

  • ● Experience in Cyber Security Governance, Risk & Compliance roles.
  • ● Strong knowledge of security frameworks such as ISO 27001, ISM, and Essential Eight.
  • ● Experience supporting Information Security Management Systems (ISMS).
  • ● Proven experience coordinating audits, compliance activities, and risk assessments.
  • ● Strong understanding of security controls, vulnerability management, and remediation tracking.
  • ● Excellent communication and stakeholder management skills, with the ability to translate technical concepts for business audiences.
  • ● Experience working within regulated or governance-focused environments.
  • ● Relevant tertiary qualifications in Information Technology, Cyber Security, or a related discipline.
  • ● Industry certifications such as CISSP, CISM, or CRISC will be highly regarded

Benefits

  • ● Opportunity to contribute to enterprise-wide cyber security initiatives.
  • ● Exposure to executive stakeholders and strategic security programs.
  • ● Collaborative and supportive team environment.
  • ● Career development opportunities within a growing cyber security function.
  • ● Competitive remuneration package and flexible working arrangements.