Risk Manager

Bouygues Construction Australia; Adelaide; On-site; AUD 110,000 - 160,000; Full time

Job summary

Bouygues Construction Australia is seeking a Risk Manager to lead and mature the enterprise risk management program across the organisation. The role focuses on identifying, evaluating and treating strategic and operational risks while safeguarding assets and reputation.

You will work with senior leadership to develop risk mitigations, maintain the risk register, and produce clear reporting for the Board and executives. A strong foundation in governance and regulatory requirements is essential.

Qualifications

• Bachelor's degree in risk-related field or equivalent practical experience.
• Professional certification in risk management, audit, compliance or business continuity desirable.
• Typically 5+ years of experience in risk management, internal control or governance.
• Experience designing or operating risk management frameworks and risk registers.

Responsibilities

• Develop and maintain the organisation's enterprise risk management framework.
• Identify, assess, monitor, and report strategic, operational, financial, regulatory and emerging risks.
• Maintain corporate risk register with risks, controls, actions, owners and due dates.
• Work with senior leaders to identify risks and develop mitigation plans.
• Prepare risk reports, dashboards and presentations for Board and executives.
• Monitor KRIs and risk indicators, adjusting controls as needed.
• Support business continuity, incident reporting and disaster recovery planning.
• Ensure alignment with legal, regulatory and internal controls requirements.
• Promote risk-aware culture through training and communication.

Skills

Enterprise risk management

Stakeholder management

Risk assessment

Regulatory compliance

Reporting to senior leadership

Education

Bachelor's degree (risk management, finance, business, law or economics)

Job description

At Bouygues Construction Australia, we are dedicated to the design, construction, and delivery of nation shaping projects across civil infrastructure, engineering, and energy and services. We have proudly been working in Australia for more than 25 years. Our local experience in underpinned by significant global expertise and resourcing.

About The Role

The Risk Manager is responsible for developing, implementing, and maintaining the organisation's enterprise risk management framework. The role identifies, assesses, monitors, and reports strategic, operational, financial, regulatory, and emerging risks, helping management make informed decisions and protect organisational assets, reputation, and objectives.

Key Responsibilities

• Develop and maintain the organisation's risk management framework, policies, procedures, and risk appetite statements.
• Facilitate risk identification, assessment, evaluation, treatment, and monitoring across business functions.
• Maintain the corporate risk register and ensure risks, controls, actions, owners, and due dates are current.
• Work with business leaders to identify key risks, assess control effectiveness, and develop mitigation plans.
• Prepare clear risk reports, dashboards, and presentations for senior management, executive committees, and the Board.
• Monitor key risk indicators (KRIs), control indicators, and emerging risk trends.
• Support business continuity, crisis management, incident reporting, and disaster recovery planning.
• Conduct risk reviews for major projects, business changes, new products, third-party suppliers, and strategic initiatives.
• Ensure alignment with relevant legal, regulatory, governance, compliance, and internal control requirements.
• Promote a strong risk-aware culture through training, guidance, and communication across the organisation.
• Liaise with Internal Audit, Compliance, Finance, Legal, Information Security, and external stakeholders as required.
• Review and recommend improvements to risk management processes, systems, and reporting practices.

Qualifications & Experience

• Bachelor's degree in Risk Management, Finance, Business Administration, Accounting, Law, Economics, or a related discipline.
• Professional certification in risk management, audit, compliance, or business continuity is desirable (e.g., CRISC, CISM, CISA, CIA, ISO 31000, IRM, FRM).
• Typically 5+ years of relevant experience in risk management, internal audit, compliance, governance, finance, or operational controls.
• Demonstrated experience designing or operating risk management frameworks and risk registers.
• Experience working with senior stakeholders and preparing reports for executive or Board-level audiences.
• Experience in a regulated, complex, or multi-functional organisation is preferred.
• Strong knowledge of enterprise risk management principles, including ISO 31000 or equivalent frameworks.
• Ability to identify, analyse, prioritise, and communicate complex risks clearly and pragmatically.
• Strong understanding of risk assessment methodologies, control design, control testing, and risk treatment planning.

Bouygues Construction Australia values diversity and welcomes applications from Aboriginal and Torres Strait Islander Australians.