IT GRC Analyst: Risk & Controls Specialist

Jenny Barbour IT And Project Recruitment; City of Melbourne; On-site; AUD 90,000 - 130,000; Full time

Job summary

Jenny Barbour IT And Project Recruitment in Port Melbourne is seeking an IT GRC Analyst to support a major digital transformation within a highly regulated setting. You will identify control objectives, document walkthroughs, and validate risk treatment closures, working with IT, security and business teams.

You will develop RACMs, define control objectives, and lead control testing, producing audit-quality risk documentation and reports while engaging stakeholders across technical and senior

Qualifications

• Experience across IT risk, controls, governance, audit or GRC in regulated environments.
• Strong knowledge of IT general controls and control testing.
• Ability to develop RACMs and document control objectives.
• Proven ability to produce audit-quality risk documents and reports.
• Excellent stakeholder engagement with IT, security and business teams.

Responsibilities

• Identify control objectives and document process walkthroughs.
• Develop and validate RACMs, control designs and operating effectiveness.
• Create test procedures and perform IT control testing.
• Document controls, policies and procedures and produce GRC reports.
• Collaborate with senior stakeholders to remediate high-priority risks.

Skills

IT risk and controls

GRC and governance

ITGCs and application controls

Control testing and RACMs

Stakeholder engagement

Audit documentation and reporting

Regulated environments experience

Education

CISA certification

CRISC certification

CISM certification

ISO 27001 certification

Job description

Jenny Barbour IT And Project Recruitment in Port Melbourne is seeking an IT GRC Analyst to support a major digital transformation within a highly regulated setting. You will identify control objectives, document walkthroughs, and validate risk treatment closures, working with IT, security and business teams.

You will develop RACMs, define control objectives, and lead control testing, producing audit-quality risk documentation and reports while engaging stakeholders across technical and senior