Graduate Cyber GRC Analyst

About the role

Kickstart your cybersecurity career with NCS Australia as a Graduate Cyber GRC Analyst. You will join an AI‑enabled cyber team and follow a structured, capability‑building pathway that gives you hands‑on experience in Governance, Risk, and Compliance (GRC) while being mentored by seasoned practitioners.

Key responsibilities

• Support control validation, audit preparation and documentation for frameworks such as ISO/IEC 27001 and the ASD Essential Eight.
• Leverage approved AI tools (e.g., Microsoft Copilot) to accelerate policy drafting, control mapping and evidence synthesis.
• Maintain risk registers, track remediation actions and produce KRI dashboards and compliance reports for cyber leadership.
• Conduct operational and third‑party risk assessments, monitor treatment plans and residual risks.
• Continuously monitor compliance against regulatory, contractual and internal security frameworks, including PSPF.
• Perform gap analysis using AI‑assisted research to identify non‑compliance and support remediation planning.
• Evaluate vendor security postures, manage questionnaires and maintain third‑party risk documentation.

Required profile

• Recent graduate with a strong interest in cybersecurity and GRC.
• Enthusiastic learner eager to progress through structured training.
• Ability to produce high‑quality outputs and work collaboratively in a value‑driven culture.

Required skills

• Microsoft Copilot (AI assistance tool).
• Familiarity with ISO/IEC 27001 framework.
• Understanding of ASD Essential Eight controls.
• Basic knowledge of PSPF compliance requirements.
• Experience with risk registers and KRI dashboard creation.

What we offer

• Mentorship from experienced cyber practitioners.
• Exposure to cutting‑edge AI tools and industry standards.
• Clear pathway to develop a modern cyber career.