GRC Analyst Cybersecurity - Mid-senior level

at  Latitude

• Permanent opportunity
• Open to Melbourne, Sydney or Perth
• Helping greener GRC fields mature
  Location: Open to Melbourne, Sydney and Perth

ABOUT THE CLIENT:

Our client is an Australian firm and part of their responsibility is safeguarding their businesses against digital threats and vulnerabilities. They are currently working on ensuring that their digital assets remain protected and resilient in the face of evolving cyber risks. This is a role in an environment that is maturing only now in the GRC field although it is a well established organisation that has been around for a very long time.
Job Description: We are seeking a motivated GRC Analyst with a focus on Cyber Security to join our dynamic team. As a GRC Analyst, you will play a crucial role in assessing and managing risks, ensuring compliance with industry regulations, and strengthening our clients’ security posture. You will collaborate with cross-functional teams to implement effective governance frameworks, policies, and controls to mitigate cyber threats effectively. We are looking for someone who enjoys helping greener companies mature.

QUALIFICATIONS:

• Bachelor’s degree in Cyber Security, Information Technology, or related field.
• 5+ years of experience in GRC roles with a focus on cyber security.
• Strong understanding of cybersecurity principles, standards, and frameworks (e.g., ISO 27001, NIST, CIS Controls).
• Point it out if you have worked with the FAIR framework.
• Experience with GRC tools and platforms.
• Excellent analytical, problem-solving, and communication skills.
• Relevant cybersecurity certifications (e.g., CISSP, CISA, CRISC) preferred but not required.
• Ability to work independently and collaboratively in a fast-paced environment.

RESPONSIBILITIES:

• Conduct risk assessments and gap analyses to identify cybersecurity vulnerabilities and areas for improvement.
• Develop, implement, and maintain cybersecurity governance frameworks, policies, and procedures.
• Monitor and report on compliance activities, including risk assessments, and remediation efforts.
• Collaborate with internal stakeholders to provide guidance on cybersecurity best practices and regulatory requirements.
• Stay informed about emerging cyber threats, trends, and regulatory changes to inform decision-making and strategy development.