Risk and Compliance Analyst

Ink Recruitment; Sydney; Hybrid; AUD 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid work model

Impactful work

Direct access to leadership

Job summary

Ink Recruitment in Sydney is seeking a compliance and risk professional to strengthen our risk and governance frameworks. The role involves developing policies, monitoring regulatory changes and supporting business continuity and security controls.

The successful candidate will have 3+ years in risk/compliance, strong stakeholder communication, and knowledge of privacy and information security obligations. This is a permanent, full-time, hybrid role with 50/50 on-site and remote work.

Qualifications

• 3+ years' experience in risk management, compliance or governance.
• Understanding of regulatory frameworks and data handling.
• Ability to engage stakeholders and communicate clearly.

Responsibilities

• Draft, implement and maintain risk and compliance policies and frameworks.
• Monitor regulatory change and update compliance programs.
• Support business continuity management and oversight processes.
• Assist with technical control testing and data protection obligations.
• Support issue and incident management and root cause analysis.
• Map supplier dependencies to identify risks and ensure contractual compliance.
• Assist governance and audit activities and deliver compliance training.

Job description

• Broad hands-on role across policy, BCM, technical controls assurance and governance.
• Work that has a significant impact on the organisation, its stakeholders and the Australian public.
• Sydney based. Permanent, full time. Hybrid working 50/50.

The Role

You will strengthen the organisation's compliance and risk management frameworks by implementing robust compliance programs, monitoring controls and supporting business continuity management. You will also be responsible for:

• Drafting, implementing and maintaining risk and compliance policies, standards and frameworks.
• Monitoring regulatory change and helping update compliance programs.
• Developing processes to support business continuity management and oversight.
• Assisting with technical control testing and providing technical controls assurance over data protection and information security obligations.
• Supporting issue and incident management, including root cause analysis, resolution and reporting.
• Mapping supplier dependencies to identify risks and ensure contractual compliance.
• Supporting governance and audit activities and delivering compliance training and awareness.

Skills and Experience

You'll be a detail-oriented, tech-literate professional with strong analytical skills and a genuine willingness to learn and contribute to strategic objectives.

• 3+ years' experience in risk management, compliance or governance.
• Solid understanding of regulatory frameworks, data handling and information security obligations.
• Strong analytical and problem-solving skills, with the ability to identify risks and develop mitigation strategies.
• Excellent communication skills, with the ability to explain complex concepts to non-specialists.
• Proven ability to engage internal and external stakeholders.
• Proactive, adaptable and organised, with a hands-on approach.
• Experience and knowledge of the Privacy Act, CPS 234, OAIC guidance, ISO 27001, SOC2 or PCI-DSS are highly regarded.

Benefits

This is a rare chance to build broad skills early in your career while contributing to a business that makes a difference.

• Real ownership and autonomy over your deliverables, with influence on business strategy.
• Direct access to decision-makers in a small company.
• Variety and impact from servicing the entire business.
• Flexible hybrid model and a culture that respects boundaries.
• Smart, approachable and non-hierarchical colleagues.