IT Risk & Compliance Specialist

About the role

You will be the sole owner of IT Risk & Compliance within a fast‑growing Financial Services security team, reporting directly to the CISO. The role combines audit leadership, governance artefact management and continuous improvement of control maturity across cloud and on‑prem environments.

Key responsibilities

• Own the IT risk register, control frameworks and compliance artefacts for the business.
• Lead external audit engagements, coordinate internal audit activities and manage audit deliverables.
• Gather, validate and present audit evidence; maintain governance documents, policies and control libraries.
• Track audit findings, drive remediation and provide status dashboards to senior stakeholders.
• Support control testing, RCSAs and assurance activities, contributing to higher control maturity.

Required profile

• Proven experience in IT governance, risk and compliance, preferably in Financial Services or a regulated sector.
• Strong stakeholder management and ability to brief senior leaders.
• Excellent attention to detail and organisational skills for evidence collection and artefact management.
• Demonstrated ability to raise control maturity and close remediation actions.

Required skills

• Knowledge of SOC, ISO 27001, NIST and COBIT frameworks.
• Hands‑on understanding of IT General Controls (access, change, backup).
• Experience with cloud/SaaS control environments.

What we offer

• Competitive salary of $150k + Super.
• Hybrid work model – three days per week onsite in Melbourne.
• Opportunity to shape the IT risk and compliance function in a leading Australian firm.