GRC Analyst - AI & OT

Kmart; Melbourne; Hybrid; AUD 150,000 - 210,000; Full time

Benefits offered by this job

Flexible hybrid work

Udemy micro-credentialing

Certifications access

Wesfarmers group opportunities

Inclusive leave

Free onsite parking

Bonus program

Staff discount card

OnePass free delivery

Brighter Benefits

Reflection room

Share purchase program

Job summary

Kmart Group in Melbourne is seeking a technology risk professional to join its Cyber Governance, Risk and Compliance team. You’ll assess risks across IT, OT and AI, maintain risk registers and support audits, helping modernise GRC practices across stores, supply chain and corporate teams.

You’ll collaborate with Technology, Cyber Security, Data and AI, Operations, Legal and Procurement, delivering data-driven risk reporting and practical guidance.

Qualifications

• 5–7 years experience in technology risk, cyber security, GRC or IT audit.
• Strong working knowledge of NIST Cybersecurity Framework 2.0.
• Hands-on AI governance and/or OT governance experience.
• Experience conducting risk assessments and audits.
• Ability to translate risk and compliance requirements into practical actions.
• Knowledge of AI tools, generative AI or agents in GRC.
• Familiar with NIST AI RMF, ISO/IEC 42001, 27001, IEC 62443, Essential Eight or CPS 230.
• Experience with UpGuard or similar third-party risk platforms and relevant certifications.

Responsibilities

• Assess technology risks across IT, OT and AI systems, use cases, models and third-party solutions.
• Maintain risk registers, treatment plans and key risk indicators; escalate if needed.
• Support internal and external audits and IT general controls testing.
• Review and maintain cyber and AI policies, standards and control evidence.
• Design AI-enabled GRC workflows for evidence collection and risk assessments.
• Partner with Technology, Cyber Security, Data and AI, Operations, Risk, Audit, Privacy, Legal, Procurement and external providers.
• Deliver data-driven risk reporting and practical guidance for stakeholders.

Skills

Technology risk

Cyber security

GRC

IT audit

Stakeholder communication

AI governance

AI tools

Risk assessment

Third-party risk

Education

Bachelor's degree in IT/Security

Tools

UpGuard

NIST CSF 2.0

ISO/IEC 27001

IEC 62443

CPS 230

Job description

At Kmart it's not just what you do, it's who you are that makes every day living brighter.

You’ll be joining a diverse team who come together to collaborate globally around tech. With six purchases made every second, you’ll feel the impacts of the work you’ll do for our millions of customers every day.

We’re focusing on being a customer-led, digitally enabled retailer. Our teams are working with really cool tech from AI/machine learning, IoT, cloud first solutions, to 3D virtual reality product checks and human sized robots named Tory. Join our team, choose your own path and work on projects that excite you.

Join our team

Join our Cyber Governance, Risk and Compliance team and help strengthen how Kmart Group manages technology risk across information technology, operational technology and artificial intelligence.

This is an opportunity to work at the intersection of responsible AI, cyber security and retail operations, supporting the safe adoption of emerging technology across stores, supply chain, distribution centres and corporate teams.

You’ll take ownership of practical risk and assurance activities while helping modernise the way GRC is delivered. From assessing AI use cases and vendor solutions to building AI-enabled workflows that improve evidence collection, monitoring and audit readiness, your work will provide clearer risk insights and help teams move forward with confidence.

What you’ll be doing

• Assess technology risks across IT, OT and AI systems, use cases, models, agents and third-party solutions.
• Maintain risk registers, treatment plans and key risk indicators, escalating issues outside approved risk appetite.
• Support internal and external audits, IT general controls testing and regulatory or compliance assessments.
• Review and maintain cyber and AI policies, standards, control evidence and the AI system inventory.
• Design and operate AI-enabled GRC workflows for evidence collection, continuous control monitoring, risk assessments and audit preparation.
• Partner with Technology, Cyber Security, Data and AI, Operations, Risk, Audit, Privacy, Legal, Procurement and external providers.
• Deliver clear, data-driven risk reporting, dashboards and practical guidance for technical and non-technical stakeholders.

To be successful in this role you'll have:

• Around 5-7 years experience in technology risk, cyber security, GRC, IT audit or a related discipline.
• Strong working knowledge of NIST Cybersecurity Framework 2.0.
• Recent hands-on experience in AI governance and/or OT governance, with a practical understanding of the other area and an interest in growing your capability.
• Experience conducting risk assessments, control testing and supporting internal or external audits.
• The ability to translate complex risk and compliance requirements into practical actions and build trusted stakeholder relationships.
• A working understanding of AI tools, generative AI or agents and how they can improve GRC activities.
• Exposure to frameworks or standards such as NIST AI RMF, ISO/IEC 42001, ISO/IEC 27001, IEC 62443, Essential Eight or CPS 230 is desirable.
• Experience with third-party risk platforms such as UpGuard (or similar tools or solution), and relevant AI, risk, audit or security certifications (e.g., AIGP, AICP, ISACA, CRISC, CGRC, CISM etc.) is advantageous.

Perks and benefits we'll offer you:

• Flexible hybrid working options through our Flex Where, Flex When, Flex Well policy, spending 60% of your week in our National Office
• We'll provide multiple ways for you to learn from online micro-credentialing in Udemy, support to gain certifications to tech community events and more.
• Great career opportunities across the broader Wesfarmers Group.
• We offer inclusive leave and ongoing support for team members of all backgrounds and family circumstances.
• Free onsite parking when you're required to come into the office.
• We want you to feel rewarded for your commitment and hard work that's why everyone gets the opportunity to participate in a bonus program.
• A team member discount card that gives you a discount at Kmart, Target, Bunnings, and Officeworks.
• A free OnePass membership offering free delivery across Kmart &Target on eligible products.
• Access to the Brighter Benefits program which entitles you to exclusive discounts and benefits in the areas of entertainment, travel, lifestyle, and health - with over 60 suppliers!
• Reflection room, space for prayer, meditation, or time for yourself.
• Wesfarmers is Kmart's parent company and each year eligible employees can elect to purchase shares through a salary sacrifice arrangement.

A place you can belong

We celebrate the rich diversity of the communities in which we operate. We are committed to creating inclusive and safe environments where all our team members can contribute and succeed. We believe that all team members should feel valued, respected and safe, and strive to ensure our recruitment process is accessible and welcoming, with applications encouraged from all candidates.