Own audit readiness for an ASX-listed organisation About Our Client An organisation within the FMCG industry, located in Burnley.
Job Description Execute and report on the organisation's multi-year cybersecurity uplift roadmap.
Maintain security policies, standards and controls aligned to ISO *****, ISM and ASD Essential Eight.
Coordinate internal and external security audits, including evidence collection and remediation tracking.
Manage risk assessments, business impact assessments and third-party security reviews.
Maintain and improve the Information Security Management System (ISMS).
Monitor security compliance, identify control gaps and drive remediation activities.
Provide governance reporting and cybersecurity guidance to key stakeholders.
The Successful Applicant A successful GRC Analyst should have: 3-5 years' experience in Cybersecurity Governance, Risk Compliance (GRC).
Solid working knowledge of ISO *****,



ISM and ASD Essential Eight.
Experience maintaining ISMS frameworks and security documentation.
Proven experience supporting security audits and audit-ready evidence management.
Experience in vendor risk management, risk assessments and control reviews.
Strong stakeholder engagement and communication skills.
Relevant tertiary qualifications and certifications such as CISSP, CISM or CRISC are advantageous.
What's on Offer Exposure to enterprise cybersecurity governance and audit programmes.
Broad role combining strategic GRC activities with hands-on security support.
Permanent, full-time position based in Melbourne.
If this GRC Analyst role in the FMCG industry aligns with your expertise, we encourage you to apply.

📌 Cyber Security & Grc Analyst (Melbourne)
🏢 Michael Page
📍 Melbourne