GRC Cyber Security Analyst – Practical Risk & Compliance

Dulux Group; Melbourne; On-site; AUD 80,000 - 110,000; Full time

Benefits offered by this job

Exclusive discounts on DuluxGroup and;

Fitness Passport partnership

20 weeks paid parental leave (primary)

2 weeks partner leave from day one

Learning and career pathways

Wellbeing Hub and EAP support

Job summary

DuluxGroup is seeking a GRC Analyst to support governance, risk and compliance across the business. You will run control testing, assurance reviews and third‑party vendor assessments while building strong relationships with stakeholders.

The role will evolve to broader cyber security initiatives as you grow in the function. You’ll contribute to SOX/J-SOX reviews, apply assurance skills across frameworks, and help drive practical, business‑friendly GRC solutions.

Qualifications

• Experience in cyber security, GRC or IT audit gained in consulting or in-house
• Exposure to SOX or similar control frameworks and the ability to adapt to new ones
• Personable, proactive style with strong relationship skills
• Pragmatic approach and comfortable operating without a fixed playbook
• Curiosity and willingness to learn and grow in the role

Responsibilities

• Deliver control testing and assurance reviews (e.g. SOX and J-SOX) across control frameworks
• Complete third-party vendor security reviews and support data privacy impact assessments
• Partner with teams to guide stakeholders through assessments with a customer‑focused approach
• Contribute to wider cyber security initiatives as the role develops
• Find better ways to run GRC processes and the supporting technology

Skills

Cyber security

GRC

IT audit

Job description

DuluxGroup is seeking a GRC Analyst to support governance, risk and compliance across the business. You will run control testing, assurance reviews and third‑party vendor assessments while building strong relationships with stakeholders.

The role will evolve to broader cyber security initiatives as you grow in the function. You’ll contribute to SOX/J-SOX reviews, apply assurance skills across frameworks, and help drive practical, business‑friendly GRC solutions.