Governance, Risk and Compliance Analyst
Core
Strengthen cybersecurity governance, manage compliance activities, and ensure security controls are consistently monitored and improved for a chocolate manufacturer.
Role type
Governance, Risk and Compliance (GRC) Analyst
Builds
Cybersecurity governance programs, compliance reports, and security control monitoring
Domain
Manufacturing / Retail / IT Security
Deliverable
dashboards & analysis
Required skills
GRC, cybersecurity, IT audit, Essential Eight, NIST CSF, ISO 27001, PCI DSS, vendor risk assessment, user access reviews, incident response documentation, vulnerability management, security audits, staff awareness training, Microsoft 365 security tools, third-party risk management
Preferred skills
Project coordination, documentation, reporting, clear communication, solutions-focused approach
Responsibilities
Coordinate Essential Eight cybersecurity maturity program and track remediation; support quarterly reporting to the Board and DSC on security and privacy obligations; manage vendor risk assessments, user access reviews, and compliance evidence; maintain cybersecurity policies, risk registers, and incident response documentation; coordinate security audits, vulnerability management, and staff awareness training; work with external security partners to monitor controls; prepare compliance reports and audit documentation for senior stakeholders; partner with teams to embed security practices.
