Risk Management Specialist

Business Review Group; Canberra; On-site; AUD 120,000 - 150,000; Full time

Job summary

Business Review Group is seeking an experienced Risk Management Specialist to support a Commonwealth Government agency with the implementation of a new enterprise risk management tool.

The successful candidate will provide specialist risk and governance advice throughout the implementation lifecycle, ensuring the agency's risk framework, processes, controls and reporting requirements are translated into the new system.

Qualifications

• Minimum five years' experience in enterprise risk management in the public sector.
• Experience implementing, enhancing or optimising a risk management information system or GRC platform.
• Knowledge of Commonwealth Risk Management Policy and the Public Governance, Performance and Accountability Act 2013.
• Ability to translate risk and governance requirements into practical system/configuration specs.
• Australian citizenship and Baseline security clearance with NV1 eligibility.
• Strong written and verbal communication skills.
• Experience preparing governance documentation and briefing papers.

Responsibilities

• Review and enhance the agency's risk management framework, policies, procedures and reporting.
• Ensure the new tool supports enterprise, strategic, operational, project and compliance risk management.
• Translate risk management requirements into system configuration specifications.
• Provide specialist advice across solution design, configuration, testing and deployment.
• Develop and execute user acceptance testing scenarios and test cases.
• Support risk-data cleansing, migration and validation activities.
• Assist with dashboards, executive reporting packs and risk-performance measures.
• Update risk frameworks and supporting documentation as required.
• Engage with technical teams and senior stakeholders throughout delivery.

Skills

Risk management

Governance

Communication

Policy development

Documentation

Stakeholder engagement

Public sector experience

Risk reporting

Tools

ServiceNow IRM

ServiceNow GRC

Job description

Business Review Group is seeking an experienced Risk Management Specialist to support a Commonwealth Government agency with the implementation of a new enterprise risk management tool.

The successful candidate will provide specialist risk and governance advice throughout the implementation lifecycle, ensuring the agency's risk framework, processes, controls and reporting requirements are effectively translated into the new system.

Risk Management Specialist

Business Review Group is seeking an experienced Risk Management Specialist to support a Commonwealth Government agency with the implementation of a new enterprise risk management tool.

The successful candidate will provide specialist risk and governance advice throughout the implementation lifecycle, ensuring the agency's risk framework, processes, controls and reporting requirements are effectively translated into the new system.

The role

The Risk Management Specialist will:

• Review the agency's existing risk management framework, policies, procedures and reporting requirements.
• Ensure the new tool supports enterprise, strategic, operational, project and compliance risk management.
• Review and validate risk taxonomies, categories, consequence and likelihood matrices, treatment plans, control libraries and reporting structures.
• Translate risk management and governance requirements into clear system configuration specifications.
• Provide specialist advice across solution design, configuration, testing and deployment.
• Develop and execute user acceptance testing scenarios and test cases.
• Support risk-data cleansing, migration and validation activities.
• Assist with the development of dashboards, executive reporting packs and risk-performance measures.
• Update risk frameworks, policies, procedures and supporting documentation where required.
• Support an out-of-the-box implementation while maintaining compliance with Commonwealth risk and governance obligations.
• Engage with technical teams, business stakeholders and senior agency representatives throughout delivery.

About you

To be successful, you will have:

• A minimum of five years' experience in enterprise risk management within the Australian Public Service, Commonwealth Government or a similarly regulated environment.
• Experience implementing, enhancing or optimising a risk management information system, GRC platform or similar governance solution.
• Strong knowledge of the Commonwealth Risk Management Policy.
• A sound understanding of the Public Governance, Performance and Accountability Act 2013.
• Knowledge of APS governance, assurance, risk-reporting and accountability requirements.
• The ability to translate risk and governance requirements into practical system and configuration requirements.
• Strong written and verbal communication skills.
• Experience preparing policies, procedures, reports, briefing papers, training materials and other governance documentation.
• Australian citizenship.
• An active AGSVA Baseline security clearance and the ability to obtain NV1.

Experience with ServiceNow Integrated Risk Management or ServiceNow GRC will be highly regarded.

Role details

• Location: Canberra
• Contract: 1 October 2026 to 31 March 2027
• Level: EL1 equivalent
• Security clearance: Active Baseline with the ability to obtain NV1