ISO 27001 Senior GRC Analyst I - APAC

Sensiba LLP; Australia; Hybrid; AUD 84,000 - 106,000; Full time

Benefits offered by this job

Market-Leading Annual Leave

Novated Leasing

Flexible & Remote Work

Discretionary Bonus

Professional Certifications

Tech of Your Choice

Inclusive Culture

Job summary

Sensiba LLP in Australia is seeking a Senior GRC Analyst to deliver end-to-end external audit engagements across cybersecurity and compliance standards. You will lead planning, testing, issue resolution and keep timelines and client expectations on track.

You will serve as a daily client contact, build strong relationships, coach junior team members, and uphold high-quality audit documentation and professional standards in a fast-paced advisory environment.

Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, Information Technology, Business, Accounting, Risk Management, or a related field.
• 3+ years of experience in governance, risk management, compliance, cybersecurity, audit, advisory, consulting, or related professional services roles.
• Experience applying governance, risk, compliance, cybersecurity, privacy, or regulatory frameworks.
• Experience mentoring junior professionals.
• Experience in consulting, advisory, audit, or professional services environment.
• Experience supporting or leading assessments against common governance, risk, compliance, privacy, or cybersecurity frameworks.
• Professional proficiency in written and spoken English, with clear client and stakeholder communication.

Responsibilities

• Communicate engagement results and recommendations clearly and professionally.
• Develop and maintain strong client relationships.
• Build an understanding of client operations, objectives, risks, and challenges.
• Support engagement planning, coordination, and execution.
• Contribute to a positive client experience through responsiveness, professionalism, and quality delivery.
• Provide guidance, coaching, and informal mentorship to GRC Analysts.
• Review work performed by junior team members and provide constructive feedback.
• Support training, onboarding, and knowledge-sharing initiatives.
• Contribute to team development and continuous improvement efforts.
• Support development of methodologies, templates, tools, and internal processes.
• Identify opportunities to improve engagement quality and efficiency.
• Maintain awareness of industry trends, regulatory developments, and evolving best practices.
• Participate in ongoing professional development and continuing education.

Skills

Client communication

Mentoring

English proficiency

Consulting experience

GRC/audit experience

Education

Bachelor's degree in Cybersecurity / related field

Job description

Location: Australia

Compensation: AU$84,000 - AU$106,000 / year

Department: Governance, Risk & Compliance

Location: Australia

Compensation: AU$84,000 - AU$106,000 / year

Description

The Senior GRC Analyst is responsible for the end-to-end delivery of a diverse portfolio of external audit client engagements across a range of cybersecurity and compliance standards. This includes taking ownership of engagements from planning and scoping through testing, issue resolution, and completion; ensuring audit testing and documentation are completed accurately, consistently, and to a high standard; and proactively managing timelines, priorities, and client expectations.

The Senior GRC Analyst serves as a key day-to-day contact for clients, building strong working relationships and communicating progress, requirements, risks, and challenges clearly and professionally. They are expected to take accountability for the successful delivery of their assigned engagements, exercise sound judgement in resolving issues, and elevate significant risks, delays, or concerns to appropriate internal and client stakeholders when required. The role also includes coaching and supporting junior team members, reviewing their work, providing practical guidance, and helping to maintain consistent quality across the wider audit team.

The ideal candidate combines strong analytical and problem-solving skills with sound professional judgment, excellent communication abilities, and a commitment to delivering high-quality client service.

Only candidates located in Australia will be considered at this time.

Key Responsibilities

• Communicate engagement results and recommendations clearly and professionally.
• Develop and maintain strong client relationships.
• Build an understanding of client operations, objectives, risks, and challenges.
• Support engagement planning, coordination, and execution.
• Contribute to a positive client experience through responsiveness, professionalism, and quality delivery.
• Provide guidance, coaching, and informal mentorship to GRC Analysts.
• Review work performed by junior team members and provide constructive feedback.
• Support training, onboarding, and knowledge-sharing initiatives.
• Contribute to team development and continuous improvement efforts.
• Support development of methodologies, templates, tools, and internal processes.
• Identify opportunities to improve engagement quality and efficiency.
• Maintain awareness of industry trends, emerging risks, regulatory developments, and evolving best practices.
• Participate in ongoing professional development and continuing education.

Skills, Knowledge and Expertise

• Bachelor's degree in Cybersecurity, Information Systems, Information Technology, Business, Accounting, Risk Management, or a related field.
• 3+ years of experience in governance, risk management, compliance, cybersecurity, audit, advisory, consulting, or related professional services roles.
• Experience supporting and applying one or more governance, risk, compliance, cybersecurity, privacy, or regulatory frameworks within client or organizational environments.
• Experience mentoring or coaching junior professionals.
• Experience working in a consulting, advisory, audit, or professional services environment.
• Experience supporting or leading assessments against common governance, risk, compliance, privacy, or cybersecurity frameworks.
• Professional proficiency in written and spoken English, including the ability to communicate clearly and effectively with clients, colleagues, and leadership.

Compensation & Benefits

This role offers a competitive base salary along with a comprehensive benefits package. The anticipated salary ranges for this position are outlined below and are subject to change:

• $84,000 - $106,000

When determining compensation, we consider a variety of factors such as a candidate’s professional experience, skills, and qualifications. Please note that final offer amounts may vary from the ranges listed above and may be adjusted over time.

There are many reasons to join the Sensiba team: market-leading leave entitlements, competitive compensation, professional advancement opportunities, and above all — our people. If you're looking for an environment that offers you growth, success, and professionalism without compromising your family, passions, and life outside of work,

Sensiba has a robust offering of benefits, including:

• Market-Leading Annual Leave – We offer 30 days of Annual Leave (10 days above the Australian statutory requirement), plus an additional 5 days of paid leave for our firm's mid-year shutdown in December. You will also have access to personal/carer's leave, parental leave, and volunteer days.
• Salary Packaging & Novated Leasing – Minimise your taxable income and maximise your take-home pay through our novated leasing program for vehicles.
• Flexible & Remote Work – Enjoy the freedom of remote work with the option to connect in person. We provide Wotso subscriptions and access to local offices for team collaboration.
• Performance-Based Bonus – Recognition for your contributions through our annual discretionary bonus program.
• Professional Development – We invest in your future with tuition reimbursement, support for professional certifications (CA/CPA etc.), and structured mentorship.
• Tech of Your Choice – We offer your choice of a high-spec Mac or PC setup.
• Inclusive & Supportive Culture – DEI initiatives, employee resource groups, and comprehensive wellness programs.