AI & Cyber GRC Analyst - Risk Governance

Kmart; Melbourne; Hybrid; AUD 120,000 - 190,000; Full time

Benefits offered by this job

Flexible hybrid working

Learning & certification support

Career opportunities

Inclusive leave

Onsite parking

Bonus program

Team discount card

OnePass membership

Brighter Benefits program

Reflection room

Employee share purchase option

Job summary

Kmart Group in Australia is seeking a Senior Technology Risk and GRC professional to join our Cyber Governance, Risk and Compliance team. You will assess technology risks across IT, OT and AI systems, maintain risk registers and support audits, helping to modernise how GRC is delivered.

You will design AI-enabled workflows, report risk insights to stakeholders, and collaborate across Technology, Legal, Privacy, Procurement and external providers to enable responsible AI adoption across stores,

Qualifications

• 5-7 years of experience in technology risk, cyber security, GRC, IT audit or related discipline.
• Strong working knowledge of NIST Cybersecurity Framework 2.0.
• Hands-on experience in AI governance and/or OT governance; interest in growing capability.
• Experience conducting risk assessments, control testing and supporting audits.
• Ability to translate complex risk requirements into practical actions and build stakeholder relationships.
• Familiarity with AI tools, generative AI or agents and how they support GRC.
• Exposure to frameworks like NIST AI RMF, ISO/IEC 42001, ISO/IEC 27001, IEC 62443, Essential Eight or CPS 230 is desirable.
• Experience with third-party risk platforms such as UpGuard; relevant certifications (AIGP, AICP, ISACA, CRISC, CGRC, CISM) are advantageous.

Responsibilities

• Assess technology risks across IT, OT and AI systems, use cases, models, agents and third-party solutions.
• Maintain risk registers, treatment plans and key risk indicators; escalate issues outside risk appetite.
• Support internal and external audits and IT general controls testing.
• Review and maintain cyber and AI policies, standards, control evidence and AI system inventory.
• Design and operate AI-enabled GRC workflows for evidence collection and audit preparation.
• Partner with Technology, Cyber Security, Data and AI, Operations, Risk, Audit, Privacy, Legal, Procurement and external providers.
• Deliver clear, data-driven risk reporting and practical guidance for technical and non-technical stakeholders.

Skills

Technology risk

Cyber security

GRC

IT audit

NIST CSF 2.0

AI governance

OT governance

Risk assessments

Control testing

Stakeholder management

AI tools / generative AI

Education

Bachelor's degree or equivalent

Tools

UpGuard

Job description

Kmart Group in Australia is seeking a Senior Technology Risk and GRC professional to join our Cyber Governance, Risk and Compliance team. You will assess technology risks across IT, OT and AI systems, maintain risk registers and support audits, helping to modernise how GRC is delivered.

You will design AI-enabled workflows, report risk insights to stakeholders, and collaborate across Technology, Legal, Privacy, Procurement and external providers to enable responsible AI adoption across stores,