An exciting opportunity for an IT GRC Analyst to join a high-profile digital transformation program within a complex and highly regulated environment.

Working closely with senior stakeholders and cross-functional teams, you will identify control objectives, document process walkthroughs, identify and document expected and existing controls, develop test procedures, and validate the closure of risk treatment plans for high‑priority risks.

Key Skills & Responsibilities

- Demonstrated experience across IT risk, controls, governance, audit or GRC, with strong knowledge of Information Technology General Controls (ITGCs), application controls and control testing.
- Hands-on experience developing Risk and Control Matrices (RACMs), defining control objectives and assessing control design and operating effectiveness.
- Proven ability to develop and perform IT control testing, identify control gaps,



recommend improvements and validate remediation activities and supporting evidence.
- Solid experience documenting processes, controls, policies and procedures and producing audit-quality GRC reports and risk documentation.
- Excellent stakeholder engagement skills, with the ability to work effectively with IT, security, technical and senior business stakeholders.
- Experience working in regulated or complex environments such as Defence, Aerospace, Manufacturing, Financial Services or Utilities is highly desirable.
- Relevant qualifications or certifications such as CISA, CRISC, CISM or ISO 27001 will be highly regarded.
- Knowledge of NIST, COBIT, ISO 27001 or ISO 31000 is advantageous.

#J-18808-Ljbffr

📌 Technology Risk Consultant (Melbourne)
🏢 Jenny Barbour It & Project Recruitment
📍 Melbourne