Data GRC Engineer: Governance, Risk & Compliance

The HR Ally; Sydney; On-site; AUD 120,000 - 180,000; Full time

Job summary

The HR Ally in Sydney is seeking a Data GRC Engineer to support governance, risk management, information security and regulatory compliance across data environments. You will help ensure data is properly protected, managed and compliant with applicable standards.

Key duties include governance and protection initiatives, risk assessments, security policy implementation, access reviews, audits, and coordination with IT, Security and Legal teams to maintain risk registers and audit documentation.

Qualifications

• Basic knowledge of Governance, Risk & Compliance (GRC).
• Understanding of data governance and data privacy.
• Basic understanding of SQL and Excel.
• Knowledge of IAM and access management.
• Understanding of risk assessments and audit processes.

Responsibilities

• Support data governance and data protection initiatives.
• Identify, assess, and document data-related risks.
• Assist in implementing and monitoring data security policies.
• Perform periodic user access reviews and access control assessments.
• Support internal and external security audits.
• Maintain risk registers, compliance reports, and audit documentation.
• Coordinate with IT, Security, Legal, and Data teams.
• Support data classification, data privacy, and data retention activities.
• Track remediation activities and ensure timely closure of audit findings.

Skills

GRC

Data governance

Data privacy

SQL

Excel

IAM

Risk assessments

Audit processes

Regulatory compliance

Tools

SQL

Excel

Job description

The HR Ally in Sydney is seeking a Data GRC Engineer to support governance, risk management, information security and regulatory compliance across data environments. You will help ensure data is properly protected, managed and compliant with applicable standards.

Key duties include governance and protection initiatives, risk assessments, security policy implementation, access reviews, audits, and coordination with IT, Security and Legal teams to maintain risk registers and audit documentation.