Senior GRC Analyst I, ISO

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior GRC Analyst I, ISO based in Australia.

We are seeking an experienced Senior GRC Analyst to manage and deliver external audit and advisory engagements across cybersecurity, governance, risk management, and compliance frameworks. In this role, you will take ownership of client engagements from initial planning and scoping through assessment, testing, issue resolution, and final reporting. You will serve as a key point of contact for clients, building trusted relationships while ensuring high-quality delivery and effective communication throughout each engagement. You will also play an important role in supporting and mentoring junior analysts, reviewing their work, and promoting consistent professional standards across the team. Working in a collaborative, remote-first environment, you will contribute to improving internal methodologies, strengthening client outcomes, and addressing evolving regulatory and cybersecurity challenges. This is an excellent opportunity to develop your expertise while making a meaningful impact across a diverse portfolio of organizations.

Accountabilities:

• Manage and deliver a diverse portfolio of external audit and GRC engagements, taking responsibility for activities from planning and scoping through testing, issue resolution, and completion.

• Coordinate engagement activities, establish priorities, manage timelines, and ensure that deliverables meet quality standards and client expectations.

• Conduct and support assessments against relevant governance, risk management, compliance, cybersecurity, privacy, and regulatory frameworks, including ISO standards.

• Ensure audit testing, supporting evidence, workpapers, and documentation are accurate, complete, consistent, and professionally presented.

• Communicate engagement findings, results, risks, and recommendations clearly and effectively to clients and internal stakeholders.

• Build and maintain strong client relationships, acting as a primary day-to-day contact and developing an understanding of each client's operations, objectives, risks, and challenges.

• Proactively manage client expectations, address engagement challenges, and escalate significant risks, delays, or issues to the appropriate stakeholders when necessary.

• Contribute to a positive client experience through responsiveness, professionalism, sound judgment, and consistent service quality.

• Provide coaching, guidance, and informal mentorship to junior GRC analysts, supporting their technical development and professional growth.

• Review work completed by junior team members, identify improvement opportunities, and provide constructive feedback to maintain consistent engagement quality.

• Support onboarding, training, knowledge-sharing initiatives, and broader team development activities.

• Contribute to the continuous improvement of audit methodologies, templates, tools, documentation standards, and internal processes.

• Identify opportunities to improve engagement efficiency, strengthen quality controls, and enhance service delivery.

• Stay informed about industry developments, emerging cybersecurity threats, regulatory changes, and evolving governance and compliance best practices.

• Participate in ongoing professional development and continuing education to maintain and strengthen technical expertise.

Requirements:

• Bachelor's degree in Cybersecurity, Information Systems, Information Technology, Business, Accounting, Risk Management, or a related discipline.

• At least 3 years of professional experience in governance, risk management, compliance, cybersecurity, auditing, advisory, consulting, or a related field.

• Practical experience applying or supporting one or more governance, risk, compliance, cybersecurity, privacy, or regulatory frameworks within an organizational or client-facing environment.

• Experience supporting or leading assessments against recognized GRC, cybersecurity, privacy, or regulatory standards, including relevant ISO frameworks.

• Previous experience working in a consulting, advisory, audit, or professional services environment.

• Demonstrated ability to manage engagement activities, coordinate deliverables, prioritize competing deadlines, and maintain high standards of documentation and quality.

• Experience mentoring, coaching, or supporting junior professionals, including reviewing their work and providing constructive feedback.

• Strong analytical and problem-solving abilities, with the capacity to evaluate complex information, identify risks, and develop practical recommendations.

• Excellent professional judgment, accountability, and attention to detail, particularly when managing client engagements and resolving technical or operational challenges.

• Strong written and verbal English communication skills, with the ability to present findings, explain…