Senior Compliance Analyst

This is a fully remote position, open to applicants in Australia.

📋 Description

• Perform compliance evaluations against ISO 27001, ISM, PSPF, RFFR, contractual obligations, and other pertinent regulatory standards.

• Offer expert advice on compliance responsibilities, risk management, and control measures to stakeholders throughout the organization.

• Maintain an inventory of relevant legal, regulatory, contractual, and policy obligations.

• Track changes in security, regulatory, and governmental frameworks, assess their implications, and facilitate the implementation of new requirements.

• Collaborate with business and technology teams to implement, review, and enhance security controls and compliance strategies.

• Lead assurance reviews, audits, and evaluations of control effectiveness, identifying compliance gaps and coordinating remediation efforts.

• Plan and execute assurance reviews to assess control effectiveness and compliance maturity.

• Develop compliance reports, dashboards, metrics, and updates for governance committees.

• Assist with customer security evaluations, compliance questionnaires, audits, and regulatory reporting tasks.

• Create and maintain compliance policies, standards, procedures, and governance documentation.

• Analyze compliance data, identify emerging risks and trends, and contribute to ongoing improvement initiatives across the organization.

⛳️ Requirements

• At least 7 years of experience in IT compliance, information security, risk management, or a related field.

• Comprehensive understanding of risk management frameworks, methodologies, and governance principles.

• Proven experience with ISO/IEC 27001, Information Security Manual (ISM), Protective Security Policy Framework (PSPF), and other governmental, regulatory, or industry security frameworks.

• Experience in conducting security assessments, audits, certification programs, and assurance activities.

• Ability to interpret legal agreements, contractual obligations, and compliance requirements.

• Strong analytical, reporting, documentation, and problem-solving abilities.

• Exceptional communication and stakeholder engagement skills.

• Excellent organizational and project management capabilities.

• High standards of integrity, professionalism, and accountability.

• A proactive, collaborative, and solution-oriented mindset.

• Experience in highly regulated sectors such as government, financial services, healthcare, or critical infrastructure is highly desirable.

• Familiarity with AI governance, emerging technology risks, and related compliance considerations is highly desirable.

• Experience managing ISO 27001 certification and security accreditation processes is highly desirable.

• Relevant tertiary qualifications in Information Security, Cyber Security, Computer Science, Technology, Risk Management, or a related area are desirable.

• CRISC, CISM, or CISA certification is desirable.

• ISO 31000 Risk Management certification is desirable.

• ISO 27001 Lead Auditor certification is desirable.

🏝️ Benefits

• Work-life balance with no weekend commitments.

• Opportunity to purchase additional annual leave.

• Discounted health insurance options.

• Novated car leasing possibilities.

• Paid parental leave.

• Service recognition programs.

• Career advancement opportunities across APM's diverse health and human services brands.

• Ongoing learning and professional development.

• Access to a supportive, collaborative, and inclusive workplace culture.