GRC Analyst II, ISO

The GRC Analyst supports client engagements designed to help organizations strengthen governance, risk management, compliance, and information security programs. This role participates in a variety of client projects involving risk assessments, control evaluations, compliance initiatives, process reviews, and other advisory services. The GRC Analyst works closely with team members and engagement leadership to assess risks, evaluate controls, review documentation, identify improvement opportunities, and support clients in achieving their governance, risk, and compliance objectives. The ideal candidate is intellectually curious, detail-oriented, and interested in developing expertise across governance, risk management, compliance, cybersecurity, and business processes. This role provides broad exposure to multiple service offerings, industries, and regulatory environments while building a foundation for progression into more advanced GRC advisory and consulting responsibilities. Only candidates based in Australia will be considered at this time. Key Responsibilities Support governance, risk, compliance, and advisory engagements across a variety of industries and client environments. Review documentation, policies, procedures, and supporting evidence. Assist with risk assessments, control evaluations, and compliance-related activities. Perform testing, analysis, and documentation of processes and controls. Identify observations, risks, improvement opportunities, and remediation