Security & GRC Analyst

12 Month Fixed Term contract

GRC Analyst

We’re not just looking for a checkbox-ticker. We’re searching for a GRC Analyst with a technical background who understands how real-world risk impacts infrastructure, operations, and people — and knows how to do something about it.

You’ve likely come from IT, cyber, or systems roles and moved into GRC because you understand that governance and compliance are only as good as the way they’re executed. That’s exactly the mindset we’re after.

In this role, you’ll be working with a well-established set of processes and frameworks — no building from scratch here. Your job is to execute, advise, and drive outcomes across the business. You’ll also have direct support and mentorship from one of the market-leading Managed Security Service Providers, giving you access to deep industry expertise, guidance, and tooling.

What you'll bring:

• Strong grounding in Governance, Risk & Compliance
• Technical background in IT, cybersecurity, or infrastructure
• Hands-on knowledge of frameworks like ISO 27001, NIST, APRA CPS 234, ISO 31000
• Familiarity with GRC platforms, risk management tools, and audit preparation
• 2–4 years’ experience in a GRC role, ideally in healthcare or the public sector
• Certifications such as CISSP, CISM, CRISC, or CISA are highly desirable

What to know upfront:

The salary is circa $110k. We know it won’t suit everyone — but for the right person, this is a chance to work in a mature, well-supported environment where your voice matters and your technical insight will drive genuine impact.

If you're ready to bring your skills into a space where they’ll be backed, valued, and make a difference — let’s talk - Hit apply now!