Governance, Risk and Compliance Analyst

**JOB REF:WesCEF547526**
- **Great opportunity for GRC Analyst looking to transition to the next level**:

- **Superb opportunity for you to join a fun, supportive and dynamic team where you will make a direct impact**:

- **Permanent, Full-Time role based in Murdoch and Kwinana, with flexibility**

**About WesCEF**

Wesfarmers Chemicals, Energy & Fertilisers (WesCEF) is a division of Wesfarmers that harnesses the potential of essential chemicals, minerals, energy and fertilisers through the ingenuity and commitment of our exceptional people.

Our businesses operate across domestic, national, and international markets and our products and services are essential in driving growth and transformation across vital industries.

Our award-winning Decarbonisation Journey is a source of pride for our 1500 team members whose focus on sustainable solutions to complex challenges is matched by their unwavering commitment to safety.

Join us. Together we can harness potential to create a prosperous future.

**The Opportunity**:
Due to internal movements, we are pleased to share that we have an exciting opportunity for a passionate and dedicated Technology Governance, Risk and Compliance Analyst to join our Technology Governance, Risk and Compliance function.

Reporting to the Technology Governance and Risk Manager, you will question the status quo and seek opportunities for WesCEF to grow and evolve.

As the GRC Analyst, this role will support WesCEF development and maintaining a robust assurance framework across the IT environments to ensure the technology risk, governance and compliance obligations are met.

**Your responsibilities include**:

- Assist in the development and maintain of policies and standards, periodically review, update, and align them with the overall policy framework;
- Assist with the maintenance and operational delivery of IT controls assurance services designed to assess whether key controls are operating effectively and consistently, including auditing of internal controls, risk assessment of 3rd party/supply chain risk exposure;
- Administer and operationally deliver cyber security risk and metrics reporting using metrics dashboard to drive compliance;
- Assist with coordination and support independent audit of technology controls as part of internal and external audits;
- Maintain and track effectively the technology risk register, manage the risks with the relevant WesCEF stakeholders and administer the completion of risk treatment plans and compliance initiatives;
- Communicating risk assessment findings to both technical and non-technical audiences, including IT business partners and project stakeholders;
- Assist with technology procedures, activities, and reporting capabilities; and
- Assist with the development and deliver security education campaigns across WesCEF.

**Do you have a mixture of the following skills and experience?**
- Tertiary qualifications in an IT related discipline, and significant experience in technology governance, compliance, risk management or cyber security operations within major organisations;
- Industry relevant certification(s) such as CISSP, CISM, CRISC, CISA, ISO 27001 Lead Implementer/Auditor or related cyber security certification;
- Demonstrated knowledge of NIST Cybersecurity Framework, ISO 27001/2, and ISO 31000;
- Experience in facilitating threat and risk assessments, controls assurance testing and auditing;
- Demonstrable technical proficiency and experience on the planning, assessment, and implementation of technology controls;
- Knowledge of security products and technologies; and
- Experience in managing moderately sized technical projects.

**We value our employees by offering**:

- Competitive remuneration with allocation of Wesfarmers shares and participation in our annual incentive plan
- Employer parental leave payment up to 16 weeks
- Inclusive work environment that celebrates diversity and uniqueness of individuals
- Ongoing professional development and career opportunities across our diverse businesses and the Wesfarmers Group
- Access to a range of health and wellbeing initiatives including private health insurance discounts, our employee assistance program, annual flu vaccinations, support resources and our safety-first culture
- Salary sacrifice opportunities, including novated lease vehicle packaging

This is an outstanding opportunity to build your career in line with our clear vision for growth. At WesCEF, we offer you the opportunity to build the career you want. We are looking for people who are excited by the challenges of our business and variety this role offers. In return, we offer the recognition and rewards you deserve for making a real impact every day.

**Why WesCEF**

Right now at WesCEF, we are looking for ambitious individuals eager for the chance to shine and thrive in their career. In return, we offer the recognition and reward you deserve for making a real impact every working day.

We are committed to building a t