Senior GRC Analyst I, ISO

Accountabilities:

Manage and deliver a diverse portfolio of external audit and GRC engagements, taking responsibility for activities from planning and scoping through testing, issue resolution, and completion.
Coordinate engagement activities, establish priorities, manage timelines, and ensure that deliverables meet quality standards and client expectations.
Conduct and support assessments against relevant governance, risk management, compliance, cybersecurity, privacy, and regulatory frameworks, including ISO standards.
Ensure audit testing, supporting evidence, workpapers, and documentation are accurate, complete, consistent, and professionally presented.
Communicate engagement findings, results, risks, and recommendations clearly and effectively to clients and internal stakeholders.
Build and maintain strong client relationships, acting as a primary day-to-day contact and developing an understanding of each client's operations, objectives, risks, and challenges.
Proactively manage client expectations, address engagement challenges, and escalate significant risks, delays, or issues to the appropriate stakeholders when necessary.
Contribute to a positive client experience through responsiveness, professionalism, sound judgment, and consistent service quality.
Provide coaching, guidance, and informal mentorship to junior GRC analysts, supporting their technical development and professional growth.
Review work completed by junior team members, identify improvement opportunities, and provide constructive feedback to maintain consistent engagement quality.
Support onboarding, training, knowledge-sharing initiatives, and broader team development activities.
Contribute to the continuous improvement of audit methodologies, templates, tools, documentation standards, and internal processes.
Identify opportunities to improve engagement efficiency, strengthen quality controls, and enhance service delivery.
Stay informed about industry developments, emerging cybersecurity threats, regulatory changes, and evolving governance and compliance best practices.
Participate in ongoing professional development and continuing education to maintain and strengthen technical expertise.
Requirements:
Bachelor's degree in Cybersecurity, Information Systems, Information Technology, Business, Accounting, Risk Management, or a related discipline.
At least 3 years of professional experience in governance, risk management, compliance, cybersecurity, auditing, advisory, consulting, or a related field.
Practical experience applying or supporting one or more governance, risk, compliance, cybersecurity, privacy, or regulatory frameworks within an organizational or client-facing environment.
Experience supporting or leading assessments against recognized GRC, cybersecurity, privacy, or regulatory standards, including relevant ISO frameworks.
Previous experience working in a consulting, advisory, audit, or professional services environment.
Demonstrated ability to manage engagement activities, coordinate deliverables, prioritize competing deadlines, and maintain high standards of documentation and quality.
Experience mentoring, coaching, or supporting junior professionals, including reviewing their work and providing constructive feedback.
Strong analytical and problem-solving abilities, with the capacity to evaluate complex information, identify risks, and develop practical recommendations.
Excellent professional judgment, accountability, and attention to detail, particularly when managing client engagements and resolving technical or operational challenges.
Strong written and verbal English communication skills, with the ability to present findings, explain recommendations, and communicate effectively with clients, colleagues, and senior stakeholders.
Excellent interpersonal and relationship-building skills, with a client-focused approach and the ability to collaborate across different teams.
Proactive, organized, and adaptable, with the ability to work independently, manage multiple priorities, and contribute effectively within a remote working environment.
A commitment to continuous learning, professional development, and maintaining up-to-date knowledge of industry standards and emerging risks.
Location requirement: Candidates must currently be based in Australia to be considered for this opportunity.
Benefits:
Competitive salary: Annual base salary ranging from AU$84,000 to AU$106,000, depending on professional experience, skills, and qualifications.
Generous annual leave: Enjoy 30 days of annual leave, exceeding the Australian statutory minimum by 10 days.
Additional paid leave: Benefit from an extra 5 days of paid leave during the firm's December mid-year shutdown.
Comprehensive leave entitlements: Access personal and carer's leave, parental leave, and dedicated volunteer days.
Flexible and remote working: Work remotely with the flexibility to connect in person when needed.
Coworking access: Benefit from Wotso subscriptions and access to local offices for team collaboration and in-person meetings.
Performance-based rewards: Become eligible for an annual discretionary bonus program that recognizes individual contributions.
Salary packaging: Access salary packaging and novated leasing options to help optimize your take-home pay and vehicle expenses.
Professional development: Receive tuition reimbursement and financial support for professional certifications and industry qualifications.
Career advancement: Benefit from structured mentorship, ongoing learning opportunities, and clear pathways for professional growth.
Technology support: Choose between a high-performance Mac or PC setup to support your work.
Health and well-being: Access comprehensive wellness initiatives designed to support your physical and mental well-being.
Inclusive workplace culture: Join a collaborative environment that promotes diversity, equity, inclusion, and employee resource groups.
Supportive team environment: Work alongside professionals who value collaboration, continuous improvement, and high-quality client service.
Work-life balance: Enjoy a workplace that encourages professional achievement while respecting your personal commitments, family, and interests outside work.