GRC Analyst II, SOC

Sensiba LLP; Australia; On-site; AUD 70,000 - 87,000; Full time

Benefits offered by this job

Market-Leading Annual Leave

Flexible & Remote Work

Bonu s program

Professional Development

Tech of Your Choice

Inclusive culture

Job summary

Sensiba LLP is seeking a GRC Analyst II, SOC to join our Australia-based Governance, Risk & Compliance team. You will help audit IT controls, assess risk, and advise clients on control improvements across SOC engagements.

The role involves leveraging automated evidence and manual procedures, coaching team members, and delivering clear audit findings to leadership. Only Australia-based candidates will be considered.

Qualifications

• 1+ years of experience in governance, risk management, compliance, cybersecurity, audit, advisory or related professional services roles.
• Experience conducting SOC 1/2 audits.
• Professional certifications such as CISA, CISSP, CIPP, etc. are a plus.

Responsibilities

• Conduct detailed external audits of clients' IT controls and business processes to ensure compliance with standards.
• Test and document access controls, change management, and other IT controls across SOC engagements.
• Evaluate and test application and automated controls across multiple systems and client processes.
• Assess client risk and recommend control improvements and remediation steps.
• Review security policies and risk documentation for client environments and services.
• Build strong client relationships and clearly communicate audit findings and recommendations.

Skills

SOC audits

English proficiency

Auditing standards

Education

Bachelor's degree in Cybersecurity, Information Systems, IT, Business, Risk Management or related field

Tools

Drata

Vanta

Job description

GRC Analyst II, SOC

Department: Governance, Risk & Compliance

Employment Type: Full Time

Location: Australia

Reporting To: Jesse Britto

Compensation: AU$70,000 - AU$87,000 / year

Description

The GRC Auditor II is responsible for ensuring client satisfaction and efficient execution of engagement plans, while serving as a coach and advisor to team members. This role focuses on IT controls, security, and compliance across SOC engagements, as well as broader risk and assessment services. Responsibilities include evaluating, testing, and documenting controls related to security, availability, processing integrity, and key business processes, including access management, change management, and system operations.

This role works across both platform-enabled (e.g., Drata, Vanta) and traditional audit environments, requiring adaptability in leveraging automated evidence as well as performing manual audit procedures. The Senior GRC Auditor I will build strong client relationships through a deep understanding of client systems, technology environments, and compliance requirements, while effectively communicating audit findings and recommendations.

Only candidates located in Australia will be considered at this time.

Key Responsibilities

• Conduct detailed external audits of clients' business processes and IT controls, ensuring compliance with industry standards and regulations.
• Observe, review, document, and test key business process transactions, access controls, change management controls, operational and organizational controls, and automated controls for engagements.
• Review, document, evaluate and test application controls, particularly automated controls on a wide range of systems and software applications across a wide variety of client business processes.
• Evaluate clients' business, IT, and security risks, identifying areas of concern and recommending appropriate control measures and process improvements to mitigate risks.
• Assess security policies and procedures, reviewing risk management / risk assessment documentation, and controls of our clients’ business applications, networks, operating systems, and other components of their technology infrastructure.
• Support internal and external security assessments of new and existing services and infrastructure including operational, regulatory, and contractual requirements.
• Develop and nurture strong relationships with clients, gaining insight into their businesses, risks, and compliance.

Skills, Knowledge and Expertise

• Bachelor's degree in Cybersecurity, Information Systems, Information Technology, Business, Accounting, Risk Management, or a related field.
• 1+ years of experience in governance, risk management, compliance, cybersecurity, audit, advisory, consulting, or related professional services roles.
• Experience conducting SOC 1/2 audits.
• Relevant professional designation such as CISA, CISSP, CIPP, etc. is a plus.
• Experience with SOC readiness platforms (e.g., Drata, Vanta, etc.) is preferred.
• Professional proficiency in written and spoken English, including the ability to communicate clearly and effectively with clients, colleagues, and leadership.

Compensation & Benefits

This role offers a competitive base salary along with a comprehensive benefits package. The anticipated salary ranges for this position are outlined below and are subject to change:

• $70,000 - $87,000

When determining compensation, we consider a variety of factors such as a candidate’s professional experience, skills, and qualifications. Please note that final offer amounts may vary from the ranges listed above and may be adjusted over time.

There are many reasons to join the Sensiba team: market-leading leave entitlements, competitive compensation, professional advancement opportunities, and above all — our people.

Sensiba has a robust offering of benefits, including:

• Market-Leading Annual Leave – We offer 30 days of Annual Leave (10 days above the Australian statutory requirement), plus an additional 5 days of paid leave for our firm's mid-year shutdown in December. You will also have access to personal/carer's leave, parental leave, and volunteer days.
• Salary Packaging & Novated Leasing – Minimise your taxable income and maximise your take-home pay through our novated leasing program for vehicles.
• Flexible & Remote Work – Enjoy the freedom of remote work with the option to connect in person. We provide Wotso subscriptions and access to local offices for team collaboration.
• Performance-Based Bonus – Recognition for your contributions through our annual discretionary bonus program.
• Professional Development – We invest in your future with tuition reimbursement, support for professional certifications (CA/CPA etc.), and structured mentorship.
• Tech of Your Choice – We offer your choice of a high-spec Mac or PC setup.
• Inclusive & Supportive Culture – DEI initiatives, employee resource groups, and comprehensive wellness programs.