GRC Analyst

Kmart; Melbourne; Hybrid; AUD 120,000 - 190,000; Full time

Benefits offered by this job

Flexible hybrid working

Learning & certification support

Career opportunities

Inclusive leave

Onsite parking

Bonus program

Team discount card

OnePass membership

Brighter Benefits program

Reflection room

Employee share purchase option

Job summary

Kmart Group in Australia is seeking a Senior Technology Risk and GRC professional to join our Cyber Governance, Risk and Compliance team. You will assess technology risks across IT, OT and AI systems, maintain risk registers and support audits, helping to modernise how GRC is delivered.

You will design AI-enabled workflows, report risk insights to stakeholders, and collaborate across Technology, Legal, Privacy, Procurement and external providers to enable responsible AI adoption across stores,

Qualifications

• 5-7 years of experience in technology risk, cyber security, GRC, IT audit or related discipline.
• Strong working knowledge of NIST Cybersecurity Framework 2.0.
• Hands-on experience in AI governance and/or OT governance; interest in growing capability.
• Experience conducting risk assessments, control testing and supporting audits.
• Ability to translate complex risk requirements into practical actions and build stakeholder relationships.
• Familiarity with AI tools, generative AI or agents and how they support GRC.
• Exposure to frameworks like NIST AI RMF, ISO/IEC 42001, ISO/IEC 27001, IEC 62443, Essential Eight or CPS 230 is desirable.
• Experience with third-party risk platforms such as UpGuard; relevant certifications (AIGP, AICP, ISACA, CRISC, CGRC, CISM) are advantageous.

Responsibilities

• Assess technology risks across IT, OT and AI systems, use cases, models, agents and third-party solutions.
• Maintain risk registers, treatment plans and key risk indicators; escalate issues outside risk appetite.
• Support internal and external audits and IT general controls testing.
• Review and maintain cyber and AI policies, standards, control evidence and AI system inventory.
• Design and operate AI-enabled GRC workflows for evidence collection and audit preparation.
• Partner with Technology, Cyber Security, Data and AI, Operations, Risk, Audit, Privacy, Legal, Procurement and external providers.
• Deliver clear, data-driven risk reporting and practical guidance for technical and non-technical stakeholders.

Skills

Technology risk

Cyber security

GRC

IT audit

NIST CSF 2.0

AI governance

OT governance

Risk assessments

Control testing

Stakeholder management

AI tools / generative AI

Education

Bachelor's degree or equivalent

Tools

UpGuard

Job description

At Kmart it's not just what you do, it's who you are that makes every day living brighter.

You'll be joining a diverse team who come together to collaborate globally around tech. With six purchases made every second, you'll feel the impacts of the work you'll do for our millions of customers every day.

We're focusing on being a customer-led, digitally enabled retailer. Our teams are working with really cool tech from AI/machine learning, IoT, cloud first solutions, to 3D virtual reality product checks and human sized robots named Tory. Join our team, choose your own path and work on projects that excite you.

Join our team

Join our Cyber Governance, Risk and Compliance team and help strengthen how Kmart Group manages technology risk across information technology, operational technology and artificial intelligence.

This is an opportunity to work at the intersection of responsible AI, cyber security and retail operations, supporting the safe adoption of emerging technology across stores, supply chain, distribution centres and corporate teams.

You'll take ownership of practical risk and assurance activities while helping modernise the way GRC is delivered. From assessing AI use cases and vendor solutions to building AI-enabled workflows that improve evidence collection, monitoring and audit readiness, your work will provide clearer risk insights and help teams move forward with confidence.

What you’ll be doing

• Assess technology risks across IT, OT and AI systems, use cases, models, agents and third-party solutions.
• Maintain risk registers, treatment plans and key risk indicators, escalating issues outside approved risk appetite.
• Support internal and external audits, IT general controls testing and regulatory or compliance assessments.
• Review and maintain cyber and AI policies, standards, control evidence and the AI system inventory.
• Design and operate AI-enabled GRC workflows for evidence collection, continuous control monitoring, risk assessments and audit preparation.
• Partner with Technology, Cyber Security, Data and AI, Operations, Risk, Audit, Privacy, Legal, Procurement and external providers.
• Deliver clear, data-driven risk reporting, dashboards and practical guidance for technical and non-technical stakeholders.

To be successful in this role you’ll have:

• Around 5-7 years' experience in technology risk, cyber security, GRC, IT audit or a related discipline.
• Strong working knowledge of NIST Cybersecurity Framework 2.0.
• Recent hands-on experience in AI governance and/or OT governance, with a practical understanding of the other area and an interest in growing your capability.
• Experience conducting risk assessments, control testing and supporting internal or external audits.
• The ability to translate complex risk and compliance requirements into practical actions and build trusted stakeholder relationships.
• A working understanding of AI tools, generative AI or agents and how they can improve GRC activities.
• Exposure to frameworks or standards such as NIST AI RMF, ISO/IEC 42001, ISO/IEC 27001, IEC 62443, Essential Eight or CPS 230 is desirable.
• Experience with third-party risk platforms such as UpGuard (or similar tools or solution), and relevant AI, risk, audit or security certifications (e.g., AIGP, AICP, ISACA, CRISC, CGRC, CISM etc.) is advantageous.

Perks and benefits we’ll offer you:

• Flexible hybrid working options through our Flex Where, Flex When, Flex Well policy, spending 60% of your week in our National Office
• We'll provide multiple ways for you to learn from online micro-credentialing in Udemy, support to gain certifications to tech community events and more.
• Great career opportunities across the broader Wesfarmers Group.
• We offer inclusive leave and ongoing support for team members of all backgrounds and family circumstances.
• Free onsite parking when you're required to come into the office.
• We want you to feel rewarded for your commitment and hard work that's why everyone gets the opportunity to participate in a bonus program.
• A team member discount card that gives you a discount at Kmart, Target, Bunnings, and Officeworks.
• A free OnePass membership offering free delivery across Kmart & Target on eligible products.
• Access to the Brighter Benefits program which entitles you to exclusive discounts and benefits in the areas of entertainment, travel, lifestyle, and health - with over 60 suppliers!
• Reflection room, space for prayer, meditation, or time for yourself.
• Wesfarmers is Kmart's parent company and each year eligible employees can elect to purchase shares through a salary sacrifice arrangement.

A place you can belong

We celebrate the rich diversity of the communities in which we operate. We are committed to creating inclusive and safe environments where all our team members can contribute and succeed. We believe that all team members should feel valued, respected and safe, and strive to ensure our recruitment process is accessible and welcoming, with applications encouraged from all candidates.

We encourage you to tell us about any workplace adjustments that you would like, by emailing ***************@kmart.com.au