Senior Compliance Analyst

This is a fully remote position, open to applicants in Australia.

📋 Description

• Perform compliance evaluations against ISO 27001, ISM, PSPF, RFFR, contractual commitments, and other pertinent regulatory standards.

• Offer expert advice on compliance requirements, risk management, and controls to various stakeholders within the organization.

• Keep an updated register of relevant legal, regulatory, contractual, and policy responsibilities.

• Track modifications to security, regulatory, and governmental frameworks, evaluate impacts, and facilitate the implementation of new requirements.

• Collaborate with business and technology teams to apply, assess, and enhance security controls and compliance practices.

• Lead assurance evaluations, audits, and assessments of control effectiveness, pinpointing compliance deficiencies and coordinating remediation efforts.

• Organize and conduct assurance evaluations to assess control effectiveness and compliance maturity.

• Generate compliance reports, dashboards, metrics, and updates for governance committees.

• Assist in customer security evaluations, compliance questionnaires, audits, and regulatory reporting tasks.

• Create and uphold compliance policies, standards, procedures, and governance documents.

• Analyze compliance data, recognize emerging risks and trends, and contribute to continuous improvement initiatives throughout the organization.

⛳️ Requirements

• At least 7 years of experience in IT compliance, information security, risk management, or a related area.

• Profound understanding of risk management frameworks, methodologies, and governance principles.

• Proven experience working with ISO/IEC 27001, Information Security Manual (ISM), Protective Security Policy Framework (PSPF), and other governmental, regulatory, or industry security frameworks.

• Experience in conducting security assessments, audits, certification programs, and assurance activities.

• Capability to interpret legal agreements, contractual obligations, and compliance requirements.

• Strong analytical, reporting, documentation, and problem-solving skills.

• Excellent communication and stakeholder engagement abilities.

• Strong organizational and project management skills.

• High level of integrity, professionalism, and accountability.

• A proactive, collaborative, and solution-oriented mindset.

• Experience in highly regulated sectors such as government, financial services, healthcare, or critical infrastructure is highly desirable.

• Familiarity with AI governance, emerging technology risks, and related compliance aspects is highly desirable.

• Experience managing ISO 27001 certification and security accreditation processes is highly desirable.

• Tertiary qualifications in Information Security, Cyber Security, Computer Science, Technology, Risk Management, or a related field are preferred.

• CRISC, CISM, or CISA certification is preferred.

• ISO 31000 Risk Management certification is preferred.

• ISO 27001 Lead Auditor certification is preferred.

🏝️ Benefits

• Work-life balance with no weekend shifts.

• Option to purchase additional annual leave.

• Discounted health insurance offerings.

• Novated car leasing options available.

• Paid parental leave.

• Recognition programs for service milestones.

• Opportunities for career advancement across APM's diverse health and human services brands.

• Ongoing learning and professional development opportunities.

• Access to a supportive, collaborative, and inclusive workplace culture.