Responsibilities

- As a Senior Risk and Compliance Analyst at Mytra, you will join the Security team during a critical period of growth, customer expansion, and security program maturation
- Our team is building the operational foundation for scalable security governance, SOC 2 and ISO 27001 readiness, customer trust, vendor risk management, and transparent execution across company-wide security initiatives
- The ideal candidate is developing professional expertise in risk and compliance, can apply company policies and defined procedures to a variety of security and compliance issues, and can manage moderate-scope work with judgment, organization, and clear escalation
- You will work closely with internal stakeholders, external auditors, vendors, customers, and the Security Committee to keep security work moving, organized, and visible
- Serve as the primary operational liaison between Mytra and external security certification auditors for SOC 2 and ISO 27001, helping coordinate requests, timelines, evidence packages, and follow-ups
- Own audit evidence collection workflows, including gathering evidence from internal teams, checking evidence quality, organizing materials, tracking status, and delivering complete packages to auditors
- Manage Security Committee operations, including pre-read material distribution, real-time meeting notes, committee organization tooling, recurring security activity tracking, and follow-through on personal and distributed tasks
- Serve as co-admin / co-owner of Mytra's Vanta GRC platform, helping maintain system organization, evidence workflows, control mappings, user access coordination, and audit readiness activities
- Maintain transparency across security-related work by communicating tasks, risks, status, decisions, and updates to the Security team, Security Committee, and broader company audiences as appropriate
- Track major security initiatives and help ensure they remain on schedule by maintaining clear workback plans, surfacing blockers early, and coordinating with owners across functions




- Perform third-party security reviews for prospective vendor partners, including intake, questionnaire review, evidence assessment, risk documentation, and recommendation preparation
- Support customer security reviews for prospective and existing customers by coordinating responses, collecting accurate information, managing review artifacts, and helping ensure timely completion
- Manage recurring security policy updates so policies remain current, accurate, and aligned with company standards, security commitments, and evolving compliance needs
- Interview Mytra staff to understand real operating procedures, document pertinent processes, and integrate those procedures into the security policy and procedure stack
- Research potential recent security tooling, compare options across multiple vendors, and provide clear summaries of tradeoffs, costs, risks, implementation considerations, and recommendations
- Schedule and coordinate security-related meetings with internal and external stakeholders, ensuring the right people, materials, context, and follow-ups are in place

Qualifications

Are highly organized and can manage multiple recurring activities, deadlines, requests, meetings, and follow-ups without losing details Build productive working relationships across functions and are comfortable interviewing staff, asking precise questions, and turning operational knowledge into clear written procedures Have strong written communication skills and can produce clear, structured documentation for policies, procedures, meeting notes, task trackers, review summaries,



and decision records Exercise sound judgment within defined procedures and know when to escape ambiguity, risk, blockers, or decisions that require security leadership input Are comfortable operating in a fast-paced startup environment where processes are evolving and strong documentation, ownership, and follow-through matter Demonstrate a collaborative, team-first mindset with the confidence to ask questions, raise concerns early, and help create visibility across the security program Communicate clearly and proactively with internal teams, external auditors, vendors, and customers, translating security and compliance needs into practical next steps Have experience in security, compliance, risk management, GRC, audit readiness, vendor risk, customer security reviews, or a related operational role Are detail-oriented and quality-minded, especially when reviewing evidence, updating policies, preparing auditor materials, or responding to customer and vendor security requests Understand the basics of SOC 2, ISO 27001, security policies, audit evidence, control ownership, and compliance documentation, with a desire to deepen expertise over time Interest in robotics, industrial automation, hardware/software systems, supply chain technology, or security for complex electro-mechanical systems Familiarity with GRC tools, ticketing systems, knowledge bases, vendor review platforms, or audit evidence management workflows Experience supporting SOC 2, ISO 27001, or similar security certification programs Prior exposure to customer security questionnaires, vendor due diligence, risk registers, control testing, or policy lifecycle management Experience coordinating committees, governance forums, recurring compliance activities, or cross-functional operating cadences Experience researching and comparing security tools across multiple vendors and presenting practical recommendations to technical and non-technical stakeholders If this role excites you, we encourage you to apply - even if you don't check every box.

#J-18808-Ljbffr

📌 Senior Risk and Compliance Analyst (Brisbane)
🏢 Mytra
📍 Brisbane