A successful GRC Analyst should have:

• 3-5 years' experience in Cybersecurity Governance, Risk & Compliance (GRC).
• Strong working knowledge of ISO 27001, ISM and ASD Essential Eight.
• Experience maintaining ISMS frameworks and security documentation.
• Proven experience supporting security audits and audit-ready evidence management.
• Experience in vendor risk management, risk assessments and control reviews.
• Strong stakeholder engagement and communication skills.
• Relevant tertiary qualifications and certifications such as CISSP, CISM or CRISC are advantageous.