IT Security GRC Analyst

Company Description

illion is the leading independent provider of trusted data and analytics products and services in Australia and New Zealand. illion leverages its consumer and commercial credit registries to provide end-to-end customer management solutions to clients in the financial services, telecommunications, utilities and government sectors.

Job Description

Reporting to the Technology Risk & Security Manager, collaborating and working together with the Technology team. The Governance, Risk and Compliance Analyst will be responsible for ensuring compliance with internal and external information security requirements and standards such as ISO 27001, PCI DSS and SOC2.  You will be responsible for leading customer and independent audits, security risk assessment, policies, continuous process and standard improvement.

Qualifications

• Ensure maintenance, improvement and recertification of existing ISO27001, PCI DSS and SOC2 compliances.
• Management of the compliance calendar and associated processes such as ensure compliance with policies and procedures including monthly, quarterly, and annual accounts and activity reviews
• Identify & manage security risk end-to-end in relation to customer and 3rd party engagements.
• Lead the review processes performed by external auditors, internal auditors and compliance officers.
• Co-ordination and management of all remediation activities identified as part of any audit and / or client due diligence activities.
• Ensure all audit & security requirements are met as part of new and existing contract negotiation and tendering processes.
• Maintain the Information Security Risk Profile in line with company guidelines.
• Ensure the currency and implementation of all security & compliance related policies and processes. .
• Advise technology and business stakeholders on governance and compliance matters.
• Mentoring junior security analyst.

Experience

• Minimum 5 years’ experience working as a security analyst within the financial services industry or complex environment.
• Ability to demonstrate working knowledge of ISO 27001, PCI DSS and SOC2 standards
• Knowledge of IT risks and appropriate security controls and technologies.
• Experience with ISO27001, PCI-DSS, SOC 2 Type I and II would be an advantageous.
• CISSP, CISA, or other Security industry Qualification desirable.

Additional Information

Culture

There has never been a better time to join illion. Our business is transforming. We are transforming the way we work with a strong focus on the value of our people and our customers. Our strong business leaders are modernising our culture and empowering our team to reach their full potential. There is a bright future ahead for illion and we are seeking innovative and passionate individuals to be a part of it!

Benefits

• Flexible working environment
• Social Club – Quarterly calendar of events allowing team member to network and socialized in a fun and relaxed environment
• Career Development Opportunities - we are committed to filling our role internally

How to Apply

To apply, please click "Apply Now" button and we will be in touch shortly.

Here at illion, we value diversity and inclusion and believe that we are able to grow and learn better together with a diverse team of employees. By joining illion you'll be part of an inclusive culture that celebrates a diversity of cultures, skill sets, educations and opinions. People from all culturally diverse backgrounds including Aboriginal & Torres Strait Islander Peoples are encouraged to apply