Risk and Compliance Analyst

About the role

A Sydney-based, permanent full-time position with a hybrid 50/50 arrangement. The role strengthens the organisation's compliance and risk management frameworks through compliance programs, control monitoring and business continuity support, with work that affects the organisation, its stakeholders and the Australian public.

Key responsibilities

• Draft, implement and maintain risk and compliance policies, standards and frameworks.
• Monitor regulatory change and help update compliance programs.
• Develop processes for business continuity management and oversight.
• Assist with technical control testing and provide assurance on data protection and information security obligations.
• Support issue and incident management, including root cause analysis, resolution and reporting.
• Map supplier dependencies to identify risks and ensure contractual compliance.
• Support governance and audit activities and deliver compliance training and awareness.

Required profile

• 3+ years' experience in risk management, compliance or governance.
• Solid understanding of regulatory frameworks, data handling and information security obligations.
• Strong analytical and problem-solving skills, with the ability to identify risks and develop mitigation strategies.
• Excellent communication skills and proven ability to engage internal and external stakeholders.
• Proactive, adaptable and organised, with a hands-on approach.
• Full working rights for Australia are essential.

Required skills

• Knowledge of the Privacy Act, CPS 234, OAIC guidance, ISO 27001, SOC2 or PCI-DSS is highly regarded.

What we offer

• Real ownership and autonomy over deliverables, with influence on business strategy.
• Direct access to decision-makers in a small company.
• Flexible hybrid model and a culture that respects boundaries.
• Smart, approachable and non-hierarchical colleagues.

To apply, submit your CV through the recruiter; a confidential conversation can be arranged by contacting the recruiter.