Security GRC Analyst
Core
Support and enhance the organization's cyber security framework by driving governance, risk, and compliance activities to ensure alignment with industry standards and regulatory obligations.
Role type
Security GRC Analyst
Builds
Security policies, standards, control documentation, risk registers, and compliance reports
Domain
Cybersecurity Governance, Risk & Compliance
Deliverable
dashboards & analysis
Required skills
Cybersecurity GRC experience, ISO 27001/ISM/Essential Eight knowledge, ISMS support, audit coordination, risk assessment, security controls understanding, vulnerability management, remediation tracking, stakeholder management
Preferred skills
CISSP, CISM, CRISC certifications, experience in regulated environments
Technologies
ISO 27001, ISM, Essential Eight
Responsibilities
Develop and maintain security policies and control documentation; Conduct risk assessments and maintain security risk registers; Coordinate internal and external security audits; Monitor compliance with security frameworks; Manage remediation activities; Support vendor risk assessments; Prepare security reports for leadership
Seniority
Mid-level, hands-on IC
