Cyber Security & GRC Analyst

• Own audit readiness for an ASX-listed organisation

About Our Client

An organisation within the FMCG industry, located in Burnley.

Job Description

• Execute and report on the organisation's multi-year cybersecurity uplift roadmap.
• Maintain security policies, standards and controls aligned to ISO 27001, ISM and ASD Essential Eight.
• Coordinate internal and external security audits, including evidence collection and remediation tracking.
• Manage risk assessments, business impact assessments and third-party security reviews.
• Maintain and improve the Information Security Management System (ISMS).
• Monitor security compliance, identify control gaps and drive remediation activities.
• Provide governance reporting and cybersecurity guidance to key stakeholders.

The Successful Applicant

A successful GRC Analyst should have:

• 3-5 years' experience in Cybersecurity Governance, Risk & Compliance (GRC).
• Strong working knowledge of ISO 27001, ISM and ASD Essential Eight.
• Experience maintaining ISMS frameworks and security documentation.
• Proven experience supporting security audits and audit-ready evidence management.
• Experience in vendor risk management, risk assessments and control reviews.
• Strong stakeholder engagement and communication skills.
• Relevant tertiary qualifications and certifications such as CISSP, CISM or CRISC are advantageous.

What's on Offer

• Exposure to enterprise cybersecurity governance and audit programmes.
• Broad role combining strategic GRC activities with hands-on security support.
• Permanent, full-time position based in Melbourne.

If this GRC Analyst role in the FMCG industry aligns with your expertise, we encourage you to apply.