Senior Compliance Analyst

This is a fully remote position, open to applicants in Australia.

📋 Description

• Perform compliance evaluations in accordance with ISO 27001, ISM, PSPF, RFFR, contractual obligations, and other pertinent regulatory requirements.

• Offer expert advice on compliance responsibilities, risk management, and controls to stakeholders throughout the organization.

• Keep a detailed register of applicable legal, regulatory, contractual, and policy obligations.

• Track changes in security, regulatory, and governmental frameworks, assess their impacts, and facilitate the implementation of new requirements.

• Collaborate with business and technology teams to implement, review, and enhance security controls and compliance measures.

• Lead assurance reviews, audits, and assessments of control effectiveness.

• Identify compliance deficiencies and coordinate remediation efforts.

• Plan and execute assurance reviews to assess control effectiveness and compliance maturity.

• Create compliance reports, dashboards, metrics, and updates for governance committees.

• Assist with customer security evaluations, compliance questionnaires, audits, and regulatory reporting tasks.

• Develop and maintain compliance policies, standards, procedures, and governance documentation.

• Analyze compliance data, recognize emerging risks and trends, and contribute to ongoing improvement initiatives.

⛳️ Requirements

• At least 7 years of experience in IT compliance, information security, risk management, or a related field.

• Strong knowledge of risk management frameworks, methodologies, and governance principles.

• Proven experience with ISO/IEC 27001, Information Security Manual (ISM), Protective Security Policy Framework (PSPF), and other governmental, regulatory, or industry security frameworks.

• Experience in conducting security assessments, audits, certification programs, and assurance activities.

• Ability to interpret legal agreements, contractual obligations, and compliance requirements.

• Strong analytical, reporting, documentation, and problem-solving abilities.

• Excellent communication skills and stakeholder engagement capabilities.

• Strong organizational and project management skills.

• High level of integrity, professionalism, and accountability.

• A proactive, collaborative, and solution-oriented approach.

• Experience in highly regulated sectors such as government, financial services, healthcare, or critical infrastructure.

• Familiarity with AI governance, emerging technology risks, and related compliance considerations.

• Experience in managing ISO 27001 certification and security accreditation processes.

• Tertiary qualifications in Information Security, Cyber Security, Computer Science, Technology, Risk Management, or a related discipline are preferable.

• CRISC, CISM, or CISA certification is a plus.

• ISO 31000 Risk Management certification is advantageous.

• ISO 27001 Lead Auditor certification is beneficial.

🏝️ Benefits

• Work-life balance with no weekend commitments.

• Opportunity to purchase additional annual leave.

• Discounted health insurance options.

• Novated car leasing choices.

• Paid parental leave.

• Service recognition programs.

• Career advancement opportunities within APM's diverse health and human services brands.

• Continuous learning and professional development.

• Access to a supportive, collaborative, and inclusive workplace culture.