Junior GRC Analyst supporting Governance, Risk and Compliance for technology and legal services at LEAP. Collaborating with senior stakeholders to maintain compliance posture and risk management activities.
Responsibilities
Keep the annual SOC 2 and ISO 27001 audits on track
Develop supporting documentation for Business Continuity, Disaster Recovery and Security controls.
Tracking and reporting on compliance, risk and cyber KPIs
Maintaining risk registers and following up on remediation activity.
Support Vendor and Third Party risk management, including security assessments.
Respond to client security and compliance questionnaires
Requirements
Bachelor’s degree in IT or a related field, or relevant certifications CompTIA Security+, CISA, CRISC, ISO 27001 Internal or Lead Auditor.
Solid GRC or technology risk background – SOC 2, NIST CSF, and ideally ISO 27001 are familiar territory.
It would be a bonus if you’ve worked within a tech, SaaS or B2B Software company.
Happy working across compliance, risk registers, documentation, and vendor risk, and happy to get into the detail.
Proficiency with GRC tooling such as OneTrust, Drata and UpGuard. Vanta experience is a real bonus.
Strong Microsoft office suite skills (Excel, PowerPoint, Word)
Ability to approach complex problems with creativity and critical thinking.
Excellent time management skills with the ability to prioritise tasks and manage multiple competing priorities.
Strong relationship skills, connecting easily with others, flexing your style to establish effective relationships across all levels of the company.
Benefits
Your work matters. Helping lawyers help people sits at the heart of everything we do. We solve real world problems that improve and support local, everyday law firms. So they can do their best work for the people in the communities they serve.
Make an impact. You won’t be another ‘cog in the wheel’ here. We give full trust and autonomy for you to be heard, to work on big & complex projects – and to make a real difference.
Work with a group of authentic, passionate people who love what they do.
Flexible and hybrid working. We'd like to find this person in Sydney, but we want you to work in a way that suits you and we're open to flexible arrangements that support you.
Grow your career with us. Our founder Christian Beck has been building legal tech businesses for over 30 years. There are opportunities galore to expand your career based on where your interests lie. We're not afraid to pivot based on market conditions - you will always have the opportunity to stay ahead of the curve and do your best work here.
Have fun with us. Celebrations. Socials. Sports teams. Access to sailing and yacht events.
We value your well-being - enjoy an additional paid wellbeing day every year, free gym membership, corporate dental plan and weekly massages in the office.
Work in a new, beautiful office space – with a catered lunch and breakfast every week, fully stocked kitchen and an on-site barista.
Access to LEAP Home - a program unique to LEAP to support you in buying your primary residence.
Regulatory Affairs CMC Project Lead coordinating multiple pharmaceutical projects at Sanofi. Providing strategic regulatory guidance, mentoring team members, and ensuring compliance in drug development.
Regulatory Affairs Specialist ensuring compliance for global product distribution at BD. Responsible for maintaining high - quality regulatory data and collaborating across multiple functions.
Manager, Environmental Compliance leading Rockwell Automation's global environmental compliance program across industrial automation portfolio. Strategic leadership for regulatory execution and compliance governance.
Senior Quality Compliance Manager leading governance and improvement of Quality Management System at Medline. Overseeing QMS activities and ensuring regulatory compliance throughout product lifecycle.
Compliance Manager overseeing on - site warehouse compliance, ensuring risk mitigation and training. Collaborating with leadership to uphold regulatory standards and implement compliance procedures.
Staff Program Cost Control Analyst supporting EVM Compliance at Northrop Grumman. Ensuring compliance with EVMS policies while working across multiple program teams.
Head of Trust, Risk & Regulatory to ensure AI - driven financial infrastructure meets regulatory standards. Collaborate with product and engineering to translate regulations into strategic frameworks.
Senior Regulatory Professional developing regulatory strategies for Novo Nordisk's GLP - 1 portfolio. Collaborating with cross - functional teams in submission processes to Health Authorities.
Compliance Manager ensuring adherence to Google policies in digital marketing campaigns at AMO Publishing. Engaging in data moderation and compliance monitoring in a media tech environment.
Trade Compliance Officer at Destinus managing regulatory compliance in aerospace industry. Collaborating with Dutch authorities and enhancing global compliance framework.