Cyber Security GRC Analyst

Dulux Group; Melbourne; On-site; AUD 80,000 - 110,000; Full time

Benefits offered by this job

Exclusive discounts on DuluxGroup and;

Fitness Passport partnership

20 weeks paid parental leave (primary)

2 weeks partner leave from day one

Learning and career pathways

Wellbeing Hub and EAP support

Job summary

DuluxGroup is seeking a GRC Analyst to support governance, risk and compliance across the business. You will run control testing, assurance reviews and third‑party vendor assessments while building strong relationships with stakeholders.

The role will evolve to broader cyber security initiatives as you grow in the function. You’ll contribute to SOX/J-SOX reviews, apply assurance skills across frameworks, and help drive practical, business‑friendly GRC solutions.

Qualifications

• Experience in cyber security, GRC or IT audit gained in consulting or in-house
• Exposure to SOX or similar control frameworks and the ability to adapt to new ones
• Personable, proactive style with strong relationship skills
• Pragmatic approach and comfortable operating without a fixed playbook
• Curiosity and willingness to learn and grow in the role

Responsibilities

• Deliver control testing and assurance reviews (e.g. SOX and J-SOX) across control frameworks
• Complete third-party vendor security reviews and support data privacy impact assessments
• Partner with teams to guide stakeholders through assessments with a customer‑focused approach
• Contribute to wider cyber security initiatives as the role develops
• Find better ways to run GRC processes and the supporting technology

Skills

Cyber security

GRC

IT audit

Job description

As our GRC Analyst, you'll help keep DuluxGroup secure by making governance, risk and compliance work feel practical and easy for the business. Your work will be split between running reviews and building relationships, with plenty of room to grow into broader security work.

Deliver control testing and assurance reviews (e.g. SOX and J-SOX), applying your assurance skills across different control frameworks

Complete third-party vendor security reviews and support data privacy impact assessments

Partner with teams across the business, guiding stakeholders through assessments with a "how can I help" approach

Contribute to wider cyber security initiatives as the role develops

Find better ways to run our GRC processes and the technology that supports them

• Exclusive discounts on DuluxGroup products and partner offers
• Stay active anytime, anywhere through our partnership with Fitness Passport
• 20 weeks paid parental leave (primary carers) and 2 weeks partner leave from day one
• Market leading learning, development and career pathways
• Access to our Wellbeing Hub and full EAP support

What We're Looking for:

Experience in cyber security, GRC or IT audit, gained in consulting or in-house

Exposure to SOX or similar control frameworks, and the confidence to adapt your skills to new ones

A personable, proactive style. You enjoy building relationships and talking things through

A pragmatic approach and comfort working where there isn’t always a set playbook

Curiosity and a willingness to learn. If you don't know something yet, you're keen to work it out

Don’t tick every box? We’d still love to hear from you.

About Us:

DuluxGroup is a leading marketer and manufacturer of premium brands that help people create better spaces to live and work. With a heritage of over 100 years, we're home to trusted names like Dulux, Selleys, Yates, Cabot's, and B&D, delivering products across paints, coatings, adhesives, garden care, and home improvement. As part of Nippon Paint Holdings, we combine global scale with strong local roots, driven by innovation, sustainability, and a commitment to our customers.

Our Group Functions cover Supply Chain, Sales Capability, Finance, People & Culture, IT & Digital, and Legal are an integral part of our Business Units that enable growth and operational excellence. They provide the insights, technology, and expertise that keep our businesses agile and future ready. Joining DuluxGroup means contributing to iconic brands, working in a collaborative culture, and enjoying opportunities for career growth and flexibility.

Why Join Us?

Progressing your career with the DuluxGroup means being part of a network of over 8000 employees globally who believe in our purpose to 'Imagine a Better Place'

With origins dating back to 1918, we are a leading marketer and manufacturer of iconic brands such as Dulux, Selleys, Cabots, Yates and B&D to name a few.

By joining us, you will be a part of a long‑term strategy to deliver profitable growth through brand leadership, innovation and customer intimacy. We are committed to internal mobility and growth while fostering an inclusive culture with flexible work options.