Senior Compliance Analyst — ISO 27001 & Risk Expert

Apm-Group; Sydney; On-site; AUD 130,000 - 180,000; Full time

Benefits offered by this job

Work-life balance

Extra annual leave

Health insurance

Novated lease

Parental leave

Career development

Inclusive culture

Job summary

APM in Sydney is seeking a Senior Compliance Analyst to join our growing Compliance team. You will ensure our digital systems, security controls, and business processes meet regulatory, contractual, and industry obligations, supporting certifications and governance.

You will lead assurance reviews, audits, and control assessments, maintain compliance registers, monitor regulatory changes, and provide guidance across the organisation.

Qualifications

• 7+ years in IT compliance or information security.
• Experience with ISO 27001, ISM, PSPF.
• Ability to interpret contracts and regulatory obligations.
• Strong analytical, reporting, documentation, and problem-solving skills.

Responsibilities

• Conduct compliance assessments against ISO 27001, ISM, PSPF, RFFR, and contractual obligations.
• Provide expert guidance on compliance obligations, risk management, and controls to stakeholders across the business.
• Maintain a register of applicable legal, regulatory, contractual, and policy obligations.
• Monitor changes to security, regulatory, and government frameworks, assess impacts, and drive implementation of new requirements.
• Partner with business and technology teams to implement, review, and enhance security controls and compliance measures.
• Lead assurance reviews, audits, and control effectiveness assessments, identifying compliance gaps and coordinating remediation activities.

Skills

IT compliance

Information security

Risk management

Governance

Stakeholder management

Audits

Regulatory frameworks

Documentation

Project management

Communication

Education

Bachelor's degree in Information Security / Cyber Security / CS

Job description

APM in Sydney is seeking a Senior Compliance Analyst to join our growing Compliance team. You will ensure our digital systems, security controls, and business processes meet regulatory, contractual, and industry obligations, supporting certifications and governance.

You will lead assurance reviews, audits, and control assessments, maintain compliance registers, monitor regulatory changes, and provide guidance across the organisation.