Senior Compliance Analyst

APM; Canberra; On-site; AUD 120,000 - 180,000; Full time

Benefits offered by this job

Work-life balance

Extra annual leave

Discounted health insurance

Novated car lease

Paid parental leave

Service recognition

Career growth

Professional development

Inclusive workplace culture

Job summary

APM is seeking an experienced Senior Compliance Analyst to join our growing Compliance team. You will ensure our digital systems, security controls, and business processes meet regulatory, contractual, and industry obligations.

You will drive the compliance framework, support certifications, and provide expert guidance across the organisation. You will monitor changes to security and regulatory frameworks, collaborate with technology teams to enhance controls, and lead assurance reviews.

Qualifications

• Minimum 7 years IT compliance, information security or risk management experience
• Experience with ISO/IEC 27001, ISM, PSPF, and other security frameworks
• Ability to interpret contractual requirements and regulatory obligations
• Proven ability to lead assessments, audits and assurance activities
• Strong reporting, documentation and stakeholder engagement skills
• Integrity, professionalism and accountability in delivery of security outcomes
• Proactive, collaborative and solution-oriented approach
• Experience managing compliance programs and certifications (ISO 27001)

Responsibilities

• Conduct compliance assessments against ISO 27001, ISM, PSPF and other regs
• Provide expert guidance on compliance obligations and control implementation
• Maintain registers of legal, regulatory, contractual, and policy obligations
• Monitor regulatory changes and drive implementation of new requirements
• Lead assurance reviews, audits and remediation activities
• Prepare compliance reports, dashboards and governance updates
• Support customer security reviews and regulatory reporting
• Develop and maintain compliance policies and governance documentation
• Analyse compliance data and identify emerging risks and trends
• Collaborate with business and tech teams to strengthen controls

Skills

Analytical thinking

Stakeholder management

Risk management

Regulatory awareness

Communication skills

Problem solving

Attention to detail

Continuous improvement

Education

Tertiary qualifications in Information Security or related discipline

CRISC, CISM, or CISA certification

Job description

We are seeking an experienced and proactive Senior Compliance Analyst to join our growing Compliance team.

In this role, you will be responsible for ensuring our digital systems, security controls, and business processes meet regulatory, contractual, and industry compliance obligations. You will play a key role in maintaining and improving our compliance framework, supporting certifications and accreditations, conducting assessments, and providing expert guidance across the organisation.

This is an excellent opportunity for a compliance professional who enjoys working at the intersection of technology, risk management, governance, and regulatory compliance.

Key Responsibilities

• Conduct compliance assessments against ISO 27001, ISM, PSPF, RFFR, contractual obligations, and other relevant regulatory requirements.
• Provide expert guidance on compliance obligations, risk management, and controls to stakeholders across the business.
• Maintain a register of applicable legal, regulatory, contractual, and policy obligations.
• Monitor changes to security, regulatory, and government frameworks, assess impacts, and drive implementation of new requirements.
• Partner with business and technology teams to implement, review, and enhance security controls and compliance measures.
• Lead assurance reviews, audits, and control effectiveness assessments, identifying compliance gaps and coordinating remediation activities.
• Plan and perform assurance reviews to evaluate control effectiveness and compliance maturity
• Prepare compliance reports, dashboards, metrics, and governance committee updates.
• Support customer security reviews, compliance questionnaires, audits and regulatory reporting activities.
• Develop and maintain compliance policies, standards, procedures, and governance documentation.
• Analyse compliance data, identify emerging risks and trends, and contribute to continuous improvement initiatives across the organisation.

About You

You are a highly analytical and detail-oriented compliance professional with a strong understanding of information security, compliance, and risk management frameworks. You thrive in complex environments, have excellent stakeholder management skills, and are passionate about helping organisations navigate compliance requirements while driving practical business outcomes.

Experience

• Minimum 7 years' experience in IT compliance, information security, risk management, or a related field.
• Strong understanding of risk management frameworks, methodologies, and governance principles.
• Demonstrated experience working with compliance frameworks such as:
  • ISO/IEC 27001
  • Information Security Manual (ISM)
  • Protective Security Policy Framework (PSPF)
  • Other government, regulatory, or industry security frameworks
• Experience conducting security assessments, audits, certification programs, and assurance activities.
• Ability to interpret legal agreements, contractual requirements, and compliance obligations.
• Strong analytical, reporting, documentation, and problem-solving skills.
• Excellent communication and stakeholder engagement capabilities.
• Strong organisational and project management skills.
• High level of integrity, professionalism, and accountability.
• A proactive, collaborative, and solution-focused approach.

Highly Desirable

• Experience in highly regulated environments such as government, financial services, healthcare, or critical infrastructure.
• Experience with AI governance, emerging technology risks, and related compliance considerations.
• Experience managing ISO 27001 certification and security accreditation activities.
• Tertiary qualifications in Information Security, Cyber Security, Computer Science, Technology, Risk Management, or a related discipline.
• CRISC, CISM, or CISA certification.

Why Join APM?

At APM, you'll have the opportunity to build a rewarding career while making a genuine difference in people's lives.

• Work-life balance with no weekend work
• Opportunity to purchase additional annual leave
• Discounted health insurance
• Novated car leasing options
• Paid parental leave
• Service recognition programs
• Career growth opportunities across APM's diverse health and human services brands
• Ongoing learning and professional development
• Access to a supportive, collaborative, and inclusive workplace culture

Our Commitment to Diversity

At APM, we are strengthened by diversity and committed to creating a workplace where everyone feels included, respected, and valued. We welcome applications from people of all ages, nationalities, abilities, and cultures, including Aboriginal and Torres Strait Islander peoples, members of the LGBTQIA+ community, and people living with disability.