We are currently looking for an IT Governance, Risk and Compliance Analyst to join a leading, global technology firm on their team in Brisbane, Melbourne, or Sydney . This full time, permanent role offers a unique opportunity for you to apply your expertise in IT risk management and compliance, enhancing policies and standards while supporting control assurance activities across the business.

Roles and Responsibilities:

- Support the IT Governance, Risk and Compliance programme as well as the global Information Security Management System initiative by ensuring sustainable compliance practices throughout the organisation.
- Evaluate and monitor adherence to IT controls, policies, and standards while performing thorough gap assessments to identify areas for improvement.
- Review customer due diligence questionnaires and provide guidance to stakeholders on responding effectively to client requirements.
- Facilitate and coordinate ad hoc and periodic internal or external assessments, audits, certifications-including vendor assessments by key customers-as well as IT General Controls and SOC 2 audits and ISO 27001 certification processes.
- Assist in driving the vendor security risk assessment programme using the organisation's third-party risk assessment tool while supporting the vendor due diligence process.
- Update and maintain policies, guidelines, and documentation that underpin the organisation's IT GRC strategy; work closely with other departments to ensure these are communicated clearly and followed consistently.
- Interface with global IT and business partners to offer guidance and support on compliance matters.
- Support the development and maintenance of the global risk register while assisting with risk treatment planning, monitoring, and reporting processes.
- Document control failures or gaps identified during assessments; report findings to stakeholders or control owners; provide remediation guidance; prepare reports tracking remediation activities.

The ideal candidate:

- Bachelor's degree in business administration, cybersecurity,



information security, risk management or a related field-or equivalent experience gained through practical roles.
- At least three years' experience working within governance, risk management, compliance or audit positions-ideally within large organisations or regulated industries.
- Familiarity with governance, risk management and compliance software tools that enable efficient monitoring of controls across complex environments.
- Comprehensive knowledge of regulatory frameworks such as ISO 27001, SOC 2, NIST or PCI DSS-demonstrating your ability to interpret requirements accurately.
- Strong understanding of risk assessment methodologies alongside proven experience applying frameworks within operational settings.
- Proficiency with Microsoft Office tools (Word, Excel, PowerPoint) as well as reporting tools used for compiling evidence during audits or assessments.
- Excellent analytical skills combined with high attention to detail-ensuring accuracy when reviewing documentation or identifying gaps in compliance.
- Effective communication skills enabling you to present complex information clearly to diverse stakeholder groups including technical teams and senior management.
- Ability to collaborate across teams-driving compliance initiatives forward through shared goals rather than individual effort alone.
- Strong time management skills allowing you to prioritise tasks efficiently even when faced with competing deadlines.

What sets this company apart: Along with the invaluable experience that this role will provide you with, this organisation offers a range of other benefits:

- A day off for moving house and a day off to volunteer for a charity of your choice.
- 15 days paid personal leave (sick and paid carer's leave)
- Education support
- End of month lunches, fresh fruit delivery to the offices and end of year celebrations
- Career opportunities globally
- Employee Assistance Program (EAP)

Aboriginal and Torres Strait Islander Peoples are encouraged to apply. To apply, please click "Apply" or contact Richard Lynch on 07 3032 2295 or [email protected] for a confidential discussion.

📌 IT GRC Analyst (Brisbane)
🏢 Robert Walters
📍 Brisbane