GRC Analyst II, ISO
- Compensation
- Not disclosed
- Location
- Australia
- Work setup
- Remote
- Seniority
- Middle
- Employment
- Not specified
- Experience
- 0+ years
- Category
- Security
- Posted
Skills
Must have
- Educational Background: A bachelor's degree in cybersecurity, information systems, information technology, business, accounting, risk management, or a related discipline is preferred.
- Relevant Experience: Approximately 0–3 years of experience in cybersecurity, information technology, risk management, compliance, auditing, consulting, accounting, or a related field.
- Foundational GRC Knowledge: A basic understanding of governance, risk management, compliance, cybersecurity, audit principles, or internal controls, with an interest in developing deeper expertise in
- Analytical and Problem-Solving Skills: The ability to analyze information, assess risks, evaluate processes, identify discrepancies, and contribute to practical recommendations.
- Documentation and Reporting: Strong written communication and documentation skills, with the ability to organize information clearly, accurately record findings, and prepare professional reports and w
- Communication Skills: Professional proficiency in written and spoken English, including the ability to communicate effectively with clients, colleagues, and senior team members.
- Organization and Time Management: The ability to manage multiple priorities, meet deadlines, maintain accurate records, and deliver high-quality work across concurrent engagements.
- Attention to Detail: A careful and methodical approach to reviewing documentation, testing controls, analyzing evidence, and identifying potential risks or inconsistencies.
- Collaboration and Independence: The ability to work effectively within a team while taking ownership of assigned responsibilities and progressing tasks independently when appropriate.
- Client Service Mindset: A professional, responsive, and solutions-oriented approach, with a willingness to understand client needs and contribute to positive engagement outcomes.
- Technical Proficiency: Familiarity with Microsoft Office and standard business productivity tools, including applications used for documentation, reporting, and data analysis.
- Learning Agility: Intellectual curiosity, adaptability, and a genuine interest in developing expertise across GRC, information security, regulatory compliance, and advisory services.
- Location Requirement: Candidates must be based in Australia. The position is fully remote.
Full description
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a GRC Analyst II, ISO based in Australia.
The GRC Analyst II, ISO will support organizations in strengthening their governance, risk management, compliance, and information security programs. This fully remote opportunity offers exposure to diverse client engagements, industries, and regulatory environments. You will work alongside experienced consultants and engagement leaders to assess risks, evaluate controls, review documentation, and identify opportunities for improvement. Your contributions will help clients enhance their internal processes, address compliance gaps, and build more effective risk management frameworks. The role combines analytical problem-solving, client collaboration, and hands-on advisory work, providing a strong foundation for professional growth in governance, risk, and cybersecurity. You will also develop your expertise through practical project experience, ongoing training, and collaboration with multidisciplinary teams. This is an excellent opportunity for a detail-oriented and curious professional looking to build a long-term career in GRC consulting within a flexible, supportive, and growth-oriented environment.
Accountabilities
- GRC Advisory and Client Engagements: Support governance, risk management, compliance, cybersecurity, and advisory projects across multiple industries, helping clients strengthen their internal controls and achieve their risk and compliance objectives.
- Risk Assessments and Control Evaluations: Assist with risk assessments, control testing, compliance reviews, and process evaluations to identify potential weaknesses, assess control effectiveness, and support the development of appropriate remediation strategies.
- Documentation and Evidence Review: Review client policies, procedures, business processes, supporting evidence, and other documentation to evaluate alignment with applicable standards, regulatory requirements, and internal control expectations.
- Testing and Analysis: Perform testing and analysis of business processes and controls, document results accurately, and identify risks, control deficiencies, and opportunities to improve operational effectiveness.
- Reporting and Recommendations: Prepare workpapers, reports, summaries, and client deliverables that clearly communicate findings, risks, and practical recommendations for improvement.
- Client and Team Collaboration: Communicate observations and recommendations to engagement team members and clients, collaborate with colleagues to meet project objectives, and contribute to the successful delivery of advisory engagements.