GRC Analyst - AI & OT

Kmart Australia Limited; Melbourne; Hybrid; AUD 140,000 - 190,000; Full time

Benefits offered by this job

Flexible hybrid working

Udemy micro-credentialing support

Career opportunities across Wesfarmers

Inclusive leave

Job summary

Kmart Australia Limited in Melbourne is seeking a senior technology risk professional to join the Cyber Governance, Risk and Compliance team. You will assess IT, OT and AI risks, support audits, maintain controls, and design evidence collection processes.

The role focuses on responsible AI, cyber security and retail operations, delivering risk insights, dashboards and practical guidance to diverse stakeholders. A flexible hybrid working model and ongoing learning opportunities are offered.

Qualifications

• Around 5-7 years' experience in technology risk, cyber security, GRC, IT audit or a related discipline.

Responsibilities

• Assess technology risks across IT, OT and AI systems, use cases, models, agents and third-party solutions.
• Maintain risk registers, treatment plans and key risk indicators, escalating issues outside approved risk appetite.
• Support internal and external audits, IT general controls testing and regulatory or compliance assessments.
• Review and maintain cyber and AI policies, standards, control evidence and the AI system inventory.
• Design and operate AI-enabled GRC workflows for evidence collection, continuous control monitoring, risk assessments and audit preparation.
• Partner with Technology, Cyber Security, Data and AI, Operations, Risk, Audit, Privacy, Legal, Procurement and external providers.
• Deliver clear, data-driven risk reporting, dashboards and practical guidance for technical and non-technical stakeholders.

Skills

Technology risk

Cyber security

GRC

IT audit

AI governance

Risk assessments

Vendor risk

AI RMF awareness

Tools

UpGuard

Job description

Brighter Futures Start Here

At Kmart it's not just what you do, it's who you are that makes every day living brighter.

Brighter Futures Start Here

At Kmart it's not just what you do, it's who you are that makes every day living brighter. You'll be joining a diverse team who come together to collaborate globally around tech. With six purchases made every second, you'll feel the impacts of the work you'll do for our millions of customers every day. We're focusing on being a customer-led, digitally enabled retailer. Our teams are working with really cool tech from AI/machine learning, IoT, cloud first solutions, to 3D virtual reality product checks and human sized robots named Tory. Join our team, choose your own path and work on projects that excite you.

Join our team

Join our Cyber Governance, Risk and Compliance team and help strengthen how Kmart Group manages technology risk across information technology, operational technology and artificial intelligence. This is an opportunity to work at the intersection of responsible AI, cyber security and retail operations, supporting the safe adoption of emerging technology across stores, supply chain, distribution centres and corporate teams. You'll take ownership of practical risk and assurance activities while helping modernise the way GRC is delivered. From assessing AI use cases and vendor solutions to building AI-enabled workflows that improve evidence collection, monitoring and audit readiness, your work will provide clearer risk insights and help teams move forward with confidence.

What You'll Be Doing

• Assess technology risks across IT, OT and AI systems, use cases, models, agents and third-party solutions.
• Maintain risk registers, treatment plans and key risk indicators, escalating issues outside approved risk appetite.
• Support internal and external audits, IT general controls testing and regulatory or compliance assessments.
• Review and maintain cyber and AI policies, standards, control evidence and the AI system inventory.
• Design and operate AI-enabled GRC workflows for evidence collection, continuous control monitoring, risk assessments and audit preparation.
• Partner with Technology, Cyber Security, Data and AI, Operations, Risk, Audit, Privacy, Legal, Procurement and external providers.
• Deliver clear, data-driven risk reporting, dashboards and practical guidance for technical and non-technical stakeholders.

To be successful in this role you’ll have:

• Around 5-7 years' experience in technology risk, cyber security, GRC, IT audit or a related discipline.
• Strong working knowledge of NIST Cybersecurity Framework 2.0.
• Recent hands-on experience in AI governance and/or OT governance, with a practical understanding of the other area and an interest in growing your capability.
• Experience conducting risk assessments, control testing and supporting internal or external audits.
• The ability to translate complex risk and compliance requirements into practical actions and build trusted stakeholder relationships.
• A working understanding of AI tools, generative AI or agents and how they can improve GRC activities.
• Exposure to frameworks or standards such as NIST AI RMF, ISO/IEC 42001, ISO/IEC 27001, IEC 62443, Essential Eight or CPS 230 is desirable.
• Experience with third-party risk platforms such as UpGuard (or similar tools or solution), and relevant AI, risk, audit or security certifications (e.g., AIGP, AICP, ISACA, CRISC, CGRC, CISM etc.) is advantageous.

Perks and benefits we'll offer you:

• Flexible hybrid working options through our Flex Where, Flex When, Flex Well policy, spending 60% of your week in our National Office
• We'll provide multiple ways for you to learn from online micro-credentialing in Udemy, support to gain certifications to tech community events and more.
• Great career opportunities across the broader Wesfarmers Group.
• We offer inclusive leave and ongoing support for team members of all backgrounds and family circumstances.
• Free onsite parking when you're required to come into the office.
• We want you to feel rewarded for your commitment and hard work that's why everyone gets the opportunity to participate in a bonus program.
• A team member discount card that gives you a discount at Kmart, Target, Bunnings, and Officeworks.
• A free OnePass membership offering free delivery across Kmart & Target on eligible products.
• Access to the Brighter Benefits program which entitles you to exclusive discounts and benefits in the areas of entertainment, travel, lifestyle, and health - with over 60 suppliers!
• Reflection room, space for prayer, meditation, or time for yourself.
• Wesfarmers is Kmart's parent company and each year eligible employees can elect to purchase shares through a salary sacrifice arrangement.

A place you can belong

We celebrate the rich diversity of the communities in which we operate. We are committed to creating inclusive and safe environments where all our team members can contribute and succeed. We believe that all team members should feel valued, respected and safe, and strive to ensure our recruitment process is accessible and welcoming, with applications encouraged from all candidates. We encourage you to tell us about any workplace adjustments that you would like, by emailing [e-mail]. Excited about this role, but not sure if you meet 100% of the criteria? We would still love to hear from you and encourage you to apply. Kmart tech employees who wish to be considered for a technology role, must be enrolled in the MySkills Program and have completed the self-assessment. This is a mandatory requirement. Please attach your downloaded self-assessment from the Assessments tab along with your IJP application and updated CV when submitting your application.