Own audit readiness for an ASX-listed organisation
Hands-on GRC role with broad stakeholder exposure
About Our Client
An organisation within the FMCG industry, located in Burnley.
Job Description
Execute and report on the organisation's multi-year cybersecurity uplift roadmap.
Maintain security policies, standards and controls aligned to ISO *****, ISM and ASD Essential Eight.
Coordinate internal and external security audits, including evidence collection and remediation tracking.
Manage risk assessments, business impact assessments and third-party security reviews.
Maintain and improve the Information Security Management System (ISMS).
Monitor security compliance, identify control gaps and drive remediation activities.
Provide governance reporting and cybersecurity guidance to key stakeholders.
The Successful Applicant
A successful GRC Analyst should have:
3-5 years' experience in Cybersecurity Governance,



Risk & Compliance (GRC).
Strong working knowledge of ISO *****, ISM and ASD Essential Eight.
Experience maintaining ISMS frameworks and security documentation.
Proven experience supporting security audits and audit-ready evidence management.
Experience in vendor risk management, risk assessments and control reviews.
Strong stakeholder engagement and communication skills.
Relevant tertiary qualifications and certifications such as CISSP, CISM or CRISC are advantageous.
What's on Offer
Exposure to enterprise cybersecurity governance and audit programmes.
Broad role combining strategic GRC activities with hands-on security support.
Permanent, full time position based in Melbourne.
#J-*****-Ljbffr

📌 Cyber Security & Grc Analyst (Melbourne)
🏢 Michael Page Australia
📍 Melbourne