Compliance Analyst - ISO 27001 & Risk

Apm-Group; Perth; On-site; AUD 110,000 - 150,000; Full time

Benefits offered by this job

Discounted health insurance

Novated car leasing options

Paid parental leave

Service recognition programs

Career growth opportunities

Job summary

APM is seeking an experienced Compliance Analyst to drive compliance across technology, information security and risk management domains. The role reports to the Risk & Compliance function and supports ISO/IEC 27001 certification and RFFR accreditation to align systems, processes and changes with internal policies and regulatory standards.

This position acts as a bridge between compliance, business and technology teams, embedding compliance requirements into daily operations and strategic

Qualifications

• 5+ years IT compliance, information security, or risk management experience.
• Experience in regulated environments (healthcare, banking, government) is valued.
• Strong knowledge of ISO/IEC 27001, ISM, PSPF or similar.

Responsibilities

• Support and maintain ISO/IEC 27001 and RFFR accreditation requirements.
• Conduct compliance assessments of systems, processes and controls.
• Monitor and report on compliance activities and risk findings.
• Collaborate with technology, security, and business teams to embed compliance into projects.
• Support audits, certifications, and security assessments.
• Interpret obligations to ensure alignment with contracts and regulations.
• Prepare compliance docs, reports, and recommendations for stakeholders.
• Track emerging risks and regulatory developments, including AI-related issues.

Skills

Compliance management

Stakeholder engagement

Risk assessment

Documentation

Communication

Education

Tertiary qualification in Technology/CS/InfoSec

CRISC or CISA certification

Tools

Audit tools

Security assessment tools

Job description

APM is seeking an experienced Compliance Analyst to drive compliance across technology, information security and risk management domains. The role reports to the Risk & Compliance function and supports ISO/IEC 27001 certification and RFFR accreditation to align systems, processes and changes with internal policies and regulatory standards.

This position acts as a bridge between compliance, business and technology teams, embedding compliance requirements into daily operations and strategic