GRC Analyst: ISO 27001, SOC 2 & Audit-Ready Governance

Quartex Software; Perth; Hybrid; AUD 90,000 - 130,000; Full time

Benefits offered by this job

Wellbeing support

Flexible hours

Parental leave

Corporate benefits

Novated leasing

Discount programs

Job summary

Quartex Software is seeking a Governance, Risk & Compliance (GRC) Analyst to join our Security team. You’ll help manage our security governance, risk and assurance programs across ISO27001, SOC 2 Type II and ISO 42001, ensuring controls are evidence-backed and audit-ready.

Collaborating with Technology, Product, Engineering, Legal and wider business, you’ll turn complex compliance requirements into practical, repeatable processes while advancing a mature risk posture and resilient controls.

Qualifications

• Experience in information security, governance, risk, compliance, audit or technology assurance.
• Working knowledge of security controls and frameworks such as ISO 27001 and SOC 2.
• Strong written, analytical and documentation skills.

Responsibilities

• Coordinate compliance across ISO 27001, SOC 2 Type II, ISO 42001 and other requirements.
• Manage control/evidence registers and remediation actions to stay audit-ready.
• Support audits by coordinating evidence requests, walkthroughs, findings and corrective actions.
• Maintain risk, policy and governance records and work with owners to close gaps.

Skills

Organised

Analytical

InfoSec knowledge

Governance & risk

Audit & compliance

Education

Information security qualification

Tools

ISO 27001

SOC 2

GRC platforms

Internal control testing

Job description

Quartex Software is seeking a Governance, Risk & Compliance (GRC) Analyst to join our Security team. You’ll help manage our security governance, risk and assurance programs across ISO27001, SOC 2 Type II and ISO 42001, ensuring controls are evidence-backed and audit-ready.

Collaborating with Technology, Product, Engineering, Legal and wider business, you’ll turn complex compliance requirements into practical, repeatable processes while advancing a mature risk posture and resilient controls.