Cyber Security GRC Analyst

DuluxGroup (Australia) Pty Ltd; Melbourne; On-site; AUD 120,000 - 150,000; Full time

Benefits offered by this job

Exclusive discounts

Fitness Passport

20 weeks parental leave

2 weeks partner leave

Learning & career pathways

Wellbeing Hub

EAP support

Job summary

DuluxGroup is seeking a GRC Analyst to help keep governance, risk and compliance practical for the business. The role combines control testing and assurance (SOX/J-SOX) with performing third‑party vendor security reviews and supporting data privacy assessments.

You will collaborate across teams and guide stakeholders with a helpful, solution‑oriented approach. Join a company with a rich heritage and a commitment to learning, wellbeing and flexible work arrangements.

Qualifications

• Experience in cyber security, GRC or IT audit, gained in consulting or in-house.
• Exposure to SOX or similar control frameworks, and the confidence to adapt your skills to new ones.
• A personable, proactive style. You enjoy building relationships and talking things through.
• A pragmatic approach and comfort working where there isn’t always a set playbook.
• Curiosity and a willingness to learn. If you don't know something yet, you're keen to work it out.

Responsibilities

• Deliver control testing and assurance reviews (e.g. SOX and J-SOX) across different control frameworks.
• Complete third-party vendor security reviews and support data privacy impact assessments.
• Partner with teams across the business, guiding stakeholders through assessments with a "how can I help" approach.
• Contribute to wider cyber security initiatives as the role develops.
• Find better ways to run our GRC processes and the technology that supports them.
• Exclusive discounts on DuluxGroup products and partner offers.
• Stay active anytime, anywhere through our partnership with Fitness Passport.
• 20 weeks paid parental leave (primary carers) and 2 weeks partner leave from day one.
• Market leading learning, development and career pathways.
• Access to our Wellbeing Hub and full EAP support.

Skills

Cyber security

GRC

IT audit

Relationship building

Job description

As our GRC Analyst, you'll help keep DuluxGroup secure by making governance, risk and compliance work feel practical and easy for the business. Your work will be split between running reviews and building relationships, with plenty of room to grow into broader security work.

• Deliver control testing and assurance reviews (e.g. SOX and J-SOX), applying your assurance skills across different control frameworks
• Complete third-party vendor security reviews and support data privacy impact assessments
• Partner with teams across the business, guiding stakeholders through assessments with a "how can I help" approach
• Contribute to wider cyber security initiatives as the role develops
• Find better ways to run our GRC processes and the technology that supports them
• Exclusive discounts on DuluxGroup products and partner offers
• Stay active anytime, anywhere through our partnership with Fitness Passport
• 20 weeks paid parental leave (primary carers) and 2 weeks partner leave from day one
• Market leading learning, development and career pathways
• Access to our Wellbeing Hub and full EAP support

What We're Looking for:

• Experience in cyber security, GRC or IT audit, gained in consulting or in-house
• Exposure to SOX or similar control frameworks, and the confidence to adapt your skills to new ones
• A personable, proactive style. You enjoy building relationships and talking things through
• A pragmatic approach and comfort working where there isn’t always a set playbook
• Curiosity and a willingness to learn. If you don't know something yet, you're keen to work it out
• Don’t tick every box? We’d still love to hear from you.

About Us:

DuluxGroup is a leading marketer and manufacturer of premium brands that help people create better spaces to live and work. With a heritage of over 100 years, we're home to trusted names like Dulux, Selleys, Yates, Cabot's, and B&D, delivering products across paints, coatings, adhesives, garden care, and home improvement. As part of Nippon Paint Holdings, we combine global scale with strong local roots, driven by innovation, sustainability, and a commitment to our customers.

Our Group Functions cover Supply Chain, Sales Capability, Finance, People & Culture, IT & Digital, and Legal are an integral part of our Business Units that enable growth and operational excellence. They provide the insights, technology, and expertise that keep our businesses agile and future ready. Joining DuluxGroup means contributing to iconic brands, working in a collaborative culture, and enjoying opportunities for career growth and flexibility.

Why Join Us?

Progressing your career with the DuluxGroup means being part of a network of over 8000 employees globally who believe in our purpose to 'Imagine a Better Place'

With origins dating back to 1918, we are a leading marketer and manufacturer of iconic brands such as Dulux, Selleys, Cabots, Yates and B&D to name a few.

By joining us, you will be a part of a long‑term strategy to deliver profitable growth through brand leadership, innovation and customer intimacy. We are committed to internal mobility and growth while fostering an inclusive culture with flexible work options.