• Port Melbourne Location
• High-profile digital transformation program

An exciting opportunity for an IT GRC Analyst to join a high-profile digital transformation program within a complex and highly regulated environment.

Working closely with senior stakeholders and cross-functional teams, you will identify control objectives, document process walkthroughs, identify and document expected and existing controls, develop test procedures, and validate the closure of risk treatment plans for high‑priority risks.

Key Skills & Responsibilities

• Demonstrated experience across IT risk, controls, governance, audit or GRC, with strong knowledge of Information Technology General Controls (ITGCs), application controls and control testing.
• Hands-on experience developing Risk and Control Matrices (RACMs), defining control objectives and assessing control design and operating effectiveness.
• Proven ability to develop and perform IT control testing, identify control gaps, recommend improvements and validate remediation activities and supporting evidence.
• Strong experience documenting processes, controls, policies and procedures and producing audit-quality GRC reports and risk documentation.
• Excellent stakeholder engagement skills, with the ability to work effectively with IT, security, technical and senior business stakeholders.
• Experience working in regulated or complex environments such as Defence, Aerospace, Manufacturing, Financial Services or Utilities is highly desirable.
• Relevant qualifications or certifications such as CISA, CRISC, CISM or ISO 27001 will be highly regarded.
• Knowledge of NIST, COBIT, ISO 27001 or ISO 31000 is advantageous.
• 
  

To submit your interest for this role, click on the Apply button quoting reference #6012.

As we receive a high volume of applications, we appreciate your understanding that we are unable to respond to individual enquiries. We kindly ask that you do not contact us directly regarding application status.

Thank you for taking the time to apply we truly appreciate your interest.

Employer questions

Your application will include the following questions:

• Which of the following statements best describes your right to work in Australia?
• How many years' experience do you have as a Governance Risk and Compliance Analyst?
• Which of the following cybersecurity certifications have you completed?
•