Information Security Compliance Analyst

About the role

We are seeking an Information Security Compliance Analyst with hands-on experience in information security governance, risk management, compliance, and ISO 27001. This role will be responsible for supporting and driving key GRC activities across the business, including maintaining security policies and documentation, managing risk and compliance processes, supporting ISO certification requirements, coordinating audits, and working with internal stakeholders to ensure security controls and compliance requirements are effectively managed. This role is ideal for someone who is comfortable working independently and taking ownership, rather than purely supporting a larger GRC or security team.

Key responsibilities

• Support and maintain the organisation's information security governance, risk, and compliance framework
• Conduct and coordinate information security risk assessments and maintain risk registers
• Work with relevant stakeholders to identify, assess, manage, and monitor security and compliance risks
• Track risk treatment plans and remediation activities through to completion
• Support and maintain the organisation's Information Security Management System (ISMS)
• Manage and maintain security policies, procedures, standards, and related ISMS documentation
• Support ongoing compliance with ISO/IEC 27001 requirements
• Assist with internal audits, external audits, certification activities, and remediation of audit findings
• Coordinate audit preparation and ensure relevant documentation and evidence are available
• Track audit findings, non-conformities, and corrective actions through to closure

About you

• 3+ years of experience in Information Security, GRC, IT Risk, IT Audit, or Information Security Compliance
• Hands-on experience with ISO 27001 and/or ISMS management
• Experience conducting or supporting risk assessments and maintaining risk registers
• Experience supporting internal and external audits, including evidence collection and remediation tracking
• Strong understanding of information security controls, governance, and compliance processes
• Experience developing or maintaining security policies, procedures, and documentation
• Ability to work independently and take ownership of processes and deliverables
• Strong stakeholder management and communication skills
• Highly organised with strong attention to detail and the ability to manage multiple priorities
• Stable and reliable internet connection and appropriate work-from-home equipment

About us

The Transformation Group (incorporating Talenza and Tranzformd) is shaping the future of technology and transformation recruitment and consulting across Australia. At The Transformation Group, we combine professionalism with a supportive and collaborative environment. We value people who take initiative, work independently, and continuously look for ways to improve how we operate.

Benefits

• Flexible work-from-home arrangement
• Opportunity to take genuine ownership of GRC and information security compliance processes
• Exposure to an Australian technology and transformation recruitment and consulting business
• Opportunity to work closely with senior stakeholders and contribute directly to the organisation's security and compliance maturity
• Supportive and collaborative working environment