GRC Analyst

Job Category:
Banking and Financial Services

Through the merger of Bank Australia and Qudos Bank we’re creating a better, stronger and more resilient bank for our customers and employees. As one company with two trusted brands, we’re building on the strong foundations of our history and shared values as we bring together the best of both banks.

The Technology GRC Analyst supports the Technology Governance, Risk and Compliance (GRC) function by assisting with risk, audit, compliance, control assurance and reporting activities across the Technology division. Working closely with Technology and System Owners, the role helps maintain governance frameworks, supports risk assessments and assurance activities, and ensures technology controls, obligations, issues and remediation actions are accurately documented and monitored.

Through the collection, analysis and reporting of GRC information, the role contributes to effective risk management, audit readiness and regulatory compliance, while supporting informed decision‑making and strong governance practices across the Technology division.

We have big plans to become Australia’s most trusted bank and a leading purpose‑driven business.

As a certified B Corp, we’re part of a global business community who meet the highest social and environmental standards, putting purpose over profit.

Every role and person in our bank is essential to bringing our values, purpose and aspiration to life.

We offer flexible working options, competitive salary and 14% super.

Our staff have access to a range of meaningful benefits to support their physical and mental wellbeing including 24/7 free counselling, free flu vaccinations and discounted gym memberships.

We also support staff with study assistance, paid parental leave (regardless of gender), volunteer, bereavement, gender affirmation and family violence leave; and the opportunity for bonus annual leave.

We support our staff to grow their careers through learning and development and an organisational culture where we reward and recognise innovation and values, not long hours.

We are committed to building an inclusive culture and a diverse workforce that reflects the Australian community.

We care for a conservation reserve – where we work with key partner organisations to protect threatened species and involve staff in conservation.

Support the Technology GRC function by maintaining technology risk, control, compliance and remediation records, ensuring information is accurate, current and complete.

Assist with technology risk and compliance activities across infrastructure, applications, cloud, data, operational resilience and third‑party technology domains.

Maintain risk registers, control inventories, obligations registers, issue logs and action trackers, escalating overdue or inconsistent information as required.

Support compliance with regulatory obligations and internal frameworks, including CPS 220, CPS 230, CPS 234, CPG 235, ITGC and privacy requirements.

Assist with audit, assurance and control testing activities by gathering evidence, maintaining documentation and supporting action tracking and remediation efforts.

Prepare reporting inputs, dashboards, status updates and governance forum materials to support Technology risk and compliance reporting.

Work closely with Technology teams, System Owners, Risk and Audit stakeholders to collect, validate and maintain GRC information and evidence.

Contribute to continuous improvement of Technology GRC processes, tools, reporting and documentation while building knowledge of governance, risk and compliance practices.

Strong attention to detail and ability to work accurately within established processes, maintaining high‑quality records,…