GRC Analyst II, ISO

Jobgether; United States; Remote; USD 49,000 - 61,000; Full time

Benefits offered by this job

Fully Remote Work

30 days annual leave

Discretionary annual bonus

Tuition reimbursement

Job summary

Jobgether is seeking a junior-to-mid level GRC Advisory professional to support governance, risk management, and compliance initiatives across industries. The role focuses on risk assessments, control testing, documentation, and client-facing delivery in a fully remote setting based in Australia.

You will collaborate with engagement teams, review evidence, and produce clear reports with practical remediation recommendations, while building knowledge across GRC, cybersecurity, and advisory

Qualifications

• Bachelor's degree in cybersecurity, information systems, IT, business, risk management, or related field.
• 0–3 years of experience in cybersecurity, IT, risk management, compliance, auditing, or related field.
• Basic understanding of GRC concepts and internal controls; desire to deepen expertise.
• Strong written communication and documentation skills.
• Excellent English written and spoken; ability to communicate with clients and teams.
• Ability to manage multiple priorities and deadlines.
• Proactive problem solving and analytical mindset.
• Familiarity with Microsoft Office and standard productivity tools.

Responsibilities

• GRC advisory and client engagements across multiple industries.
• Assist with risk assessments, control testing, and compliance reviews.
• Review client policies, procedures, and evidence for alignment with standards.
• Perform testing and analysis of business processes and controls.
• Prepare workpapers, reports, and client deliverables.
• Communicate observations and recommendations to teams and clients.
• Stay aware of regulatory developments and industry practices.
• Develop knowledge through hands-on projects and training.

Skills

Analytical thinking

Documentation

Communication

Organization

Attention to detail

Collaboration

Client service mindset

Learning agility

Technical proficiency

English proficiency

Education

Bachelor's degree (relevant field)

Tools

Microsoft Office

Job description

Accountabilities

- GRC Advisory and Client Engagements: Support governance, risk management, compliance, cybersecurity, and advisory projects across multiple industries, helping clients strengthen their internal controls and achieve their risk and compliance objectives.

- Risk Assessments and Control Evaluations: Assist with risk assessments, control testing, compliance reviews, and process evaluations to identify potential weaknesses, assess control effectiveness, and support the development of appropriate remediation strategies.

- Documentation and Evidence Review: Review client policies, procedures, business processes, supporting evidence, and other documentation to evaluate alignment with applicable standards, regulatory requirements, and internal control expectations.

- Testing and Analysis: Perform testing and analysis of business processes and controls, document results accurately, and identify risks, control deficiencies, and opportunities to improve operational effectiveness.

- Reporting and Recommendations: Prepare workpapers, reports, summaries, and client deliverables that clearly communicate findings, risks, and practical recommendations for improvement.

- Client and Team Collaboration: Communicate observations and recommendations to engagement team members and clients, collaborate with colleagues to meet project objectives, and contribute to the successful delivery of advisory engagements.

- Regulatory and Industry Awareness: Maintain awareness of emerging cybersecurity threats, industry practices, regulatory developments, and relevant governance and compliance standards to support effective client service.

- Professional Development: Build knowledge across governance, risk management, compliance, cybersecurity, auditing, and business processes through hands-on project experience, professional training, and collaboration with experienced team members.

Requirements

- Educational Background: A bachelor's degree in cybersecurity, information systems, information technology, business, accounting, risk management, or a related discipline is preferred.

- Relevant Experience: Approximately 0–3 years of experience in cybersecurity, information technology, risk management, compliance, auditing, consulting, accounting, or a related field.

- Foundational GRC Knowledge: A basic understanding of governance, risk management, compliance, cybersecurity, audit principles, or internal controls, with an interest in developing deeper expertise in these areas.

- Analytical and Problem-Solving Skills: The ability to analyze information, assess risks, evaluate processes, identify discrepancies, and contribute to practical recommendations.

- Documentation and Reporting: Strong written communication and documentation skills, with the ability to organize information clearly, accurately record findings, and prepare professional reports and workpapers.

- Communication Skills: Professional proficiency in written and spoken English, including the ability to communicate effectively with clients, colleagues, and senior team members.

- Organization and Time Management: The ability to manage multiple priorities, meet deadlines, maintain accurate records, and deliver high-quality work across concurrent engagements.

- Attention to Detail: A careful and methodical approach to reviewing documentation, testing controls, analyzing evidence, and identifying potential risks or inconsistencies.

- Collaboration and Independence: The ability to work effectively within a team while taking ownership of assigned responsibilities and progressing tasks independently when appropriate.

- Client Service Mindset: A professional, responsive, and solutions-oriented approach, with a willingness to understand client needs and contribute to positive engagement outcomes.

- Technical Proficiency: Familiarity with Microsoft Office and standard business productivity tools, including applications used for documentation, reporting, and data analysis.

- Learning Agility: Intellectual curiosity, adaptability, and a genuine interest in developing expertise across GRC, information security, regulatory compliance, and advisory services.

- Location Requirement: Candidates must be based in Australia. The position is fully remote.

Benefits

- Competitive Compensation: Annual salary ranging from AU$70,000 to AU$87,000 , depending on experience, skills, qualifications, and other relevant factors.

- Fully Remote Work: Enjoy the flexibility of working remotely, with opportunities to connect with colleagues in person when needed.

- Flexible Workspace Options: Access WeWork subscriptions and local offices to support collaboration and provide alternatives to working from home.

- Generous Annual Leave: Receive 30 days of annual leave, exceeding the Australian statutory requirement by 10 days.

- Additional Paid Time Off: Benefit from an extra five days of paid leave during the firm's December year-end shutdown, alongside personal and carer's leave, parental leave, and volunteer days.

- Salary Packaging and Novated Leasing: Access a vehicle novated leasing program and salary packaging options designed to help optimize take-home pay, subject to applicable eligibility and tax rules.

- Performance-Based Bonus: Become eligible for an annual discretionary bonus recognizing individual contributions and performance.

- Professional Development: Access tuition reimbursement, support for professional certifications, structured mentorship, and ongoing learning opportunities.

- Technology of Your Choice: Choose a high-performance Mac or PC setup to support your productivity and working preferences.

- Inclusive Workplace Culture: Join a collaborative and supportive environment that promotes diversity, equity, inclusion, employee resource groups, and employee wellbeing.

- Career Advancement: Build a strong foundation for progression into more advanced GRC advisory, risk management, compliance, and cybersecurity consulting roles.

- Meaningful Client Impact: Help organizations navigate complex risks, improve governance practices, and establish stronger foundations for sustainable business success.

How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.


#LI-CL1