GRC Analyst – AI & OT Risk (Hybrid)

Kmart; Melbourne; Hybrid; AUD 150,000 - 210,000; Full time

Benefits offered by this job

Flexible hybrid work

Udemy micro-credentialing

Certifications access

Wesfarmers group opportunities

Inclusive leave

Free onsite parking

Bonus program

Staff discount card

OnePass free delivery

Brighter Benefits

Reflection room

Share purchase program

Job summary

Kmart Group in Melbourne is seeking a technology risk professional to join its Cyber Governance, Risk and Compliance team. You’ll assess risks across IT, OT and AI, maintain risk registers and support audits, helping modernise GRC practices across stores, supply chain and corporate teams.

You’ll collaborate with Technology, Cyber Security, Data and AI, Operations, Legal and Procurement, delivering data-driven risk reporting and practical guidance.

Qualifications

• 5–7 years experience in technology risk, cyber security, GRC or IT audit.
• Strong working knowledge of NIST Cybersecurity Framework 2.0.
• Hands-on AI governance and/or OT governance experience.
• Experience conducting risk assessments and audits.
• Ability to translate risk and compliance requirements into practical actions.
• Knowledge of AI tools, generative AI or agents in GRC.
• Familiar with NIST AI RMF, ISO/IEC 42001, 27001, IEC 62443, Essential Eight or CPS 230.
• Experience with UpGuard or similar third-party risk platforms and relevant certifications.

Responsibilities

• Assess technology risks across IT, OT and AI systems, use cases, models and third-party solutions.
• Maintain risk registers, treatment plans and key risk indicators; escalate if needed.
• Support internal and external audits and IT general controls testing.
• Review and maintain cyber and AI policies, standards and control evidence.
• Design AI-enabled GRC workflows for evidence collection and risk assessments.
• Partner with Technology, Cyber Security, Data and AI, Operations, Risk, Audit, Privacy, Legal, Procurement and external providers.
• Deliver data-driven risk reporting and practical guidance for stakeholders.

Skills

Technology risk

Cyber security

GRC

IT audit

Stakeholder communication

AI governance

AI tools

Risk assessment

Third-party risk

Education

Bachelor's degree in IT/Security

Tools

UpGuard

NIST CSF 2.0

ISO/IEC 27001

IEC 62443

CPS 230

Job description

Kmart Group in Melbourne is seeking a technology risk professional to join its Cyber Governance, Risk and Compliance team. You’ll assess risks across IT, OT and AI, maintain risk registers and support audits, helping modernise GRC practices across stores, supply chain and corporate teams.

You’ll collaborate with Technology, Cyber Security, Data and AI, Operations, Legal and Procurement, delivering data-driven risk reporting and practical guidance.