GRC Security Analyst – SOX & Vendor Risk

DuluxGroup (Australia) Pty Ltd; Melbourne; On-site; AUD 120,000 - 150,000; Full time

Benefits offered by this job

Exclusive discounts

Fitness Passport

20 weeks parental leave

2 weeks partner leave

Learning & career pathways

Wellbeing Hub

EAP support

Job summary

DuluxGroup is seeking a GRC Analyst to help keep governance, risk and compliance practical for the business. The role combines control testing and assurance (SOX/J-SOX) with performing third‑party vendor security reviews and supporting data privacy assessments.

You will collaborate across teams and guide stakeholders with a helpful, solution‑oriented approach. Join a company with a rich heritage and a commitment to learning, wellbeing and flexible work arrangements.

Qualifications

• Experience in cyber security, GRC or IT audit, gained in consulting or in-house.
• Exposure to SOX or similar control frameworks, and the confidence to adapt your skills to new ones.
• A personable, proactive style. You enjoy building relationships and talking things through.
• A pragmatic approach and comfort working where there isn’t always a set playbook.
• Curiosity and a willingness to learn. If you don't know something yet, you're keen to work it out.

Responsibilities

• Deliver control testing and assurance reviews (e.g. SOX and J-SOX) across different control frameworks.
• Complete third-party vendor security reviews and support data privacy impact assessments.
• Partner with teams across the business, guiding stakeholders through assessments with a "how can I help" approach.
• Contribute to wider cyber security initiatives as the role develops.
• Find better ways to run our GRC processes and the technology that supports them.
• Exclusive discounts on DuluxGroup products and partner offers.
• Stay active anytime, anywhere through our partnership with Fitness Passport.
• 20 weeks paid parental leave (primary carers) and 2 weeks partner leave from day one.
• Market leading learning, development and career pathways.
• Access to our Wellbeing Hub and full EAP support.

Skills

Cyber security

GRC

IT audit

Relationship building

Job description

DuluxGroup is seeking a GRC Analyst to help keep governance, risk and compliance practical for the business. The role combines control testing and assurance (SOX/J-SOX) with performing third‑party vendor security reviews and supporting data privacy assessments.

You will collaborate across teams and guide stakeholders with a helpful, solution‑oriented approach. Join a company with a rich heritage and a commitment to learning, wellbeing and flexible work arrangements.