Senior Compliance & Risk Analyst — ISO 27001 & Audits

APM; Sydney; On-site; AUD 140,000 - 190,000; Full time

Benefits offered by this job

Work-life balance

Extra annual leave

Health insurance

Novated car leasing

Parental leave

Service recognition

Career growth

Training & development

Inclusive workplace

Job summary

APM is seeking a Senior Compliance Analyst in Australia to strengthen our compliance program. You will ensure digital systems, security controls, and business processes meet regulatory and contractual obligations, and you will guide risk management, governance, and assurance activities.

You will lead assessments, maintain obligation registers, monitor regulatory changes, and collaborate with business and technology teams to enhance security controls and compliance maturity across the

Qualifications

• Minimum 7 years' experience in IT compliance, information security, risk management, or a related field.
• Strong understanding of risk management frameworks, methodologies, and governance principles.
• Demonstrated experience with frameworks such as: ISO/IEC 27001, ISM, PSPF, and other government/regulatory security frameworks.
• Experience conducting security assessments, audits, certification programs, and assurance activities.
• Ability to interpret legal agreements, contractual requirements, and compliance obligations.
• Strong analytical, reporting, documentation, and problem-solving skills.
• Excellent communication and stakeholder engagement capabilities.
• Strong organisational and project management skills.

Responsibilities

• Conduct compliance assessments against ISO 27001, ISM, PSPF, RFFR, contractual obligations, and other regulatory requirements.
• Provide expert guidance on compliance obligations, risk management, and controls to stakeholders across the business.
• Maintain a register of applicable legal, regulatory, contractual, and policy obligations.
• Monitor changes to security, regulatory, and government frameworks, assess impacts, and drive implementation of new requirements.
• Partner with business and technology teams to implement, review, and enhance security controls and compliance measures.
• Lead assurance reviews, audits, and control effectiveness assessments, identifying compliance gaps and coordinating remediation activities.
• Plan and perform assurance reviews to evaluate control effectiveness and compliance maturity
• Prepare compliance reports, dashboards, metrics, and governance committee updates.
• Support customer security reviews, compliance questionnaires, audits and regulatory reporting activities.
• Develop and maintain compliance policies, standards, procedures, and governance documentation.
• Analyse compliance data, identify emerging risks and trends, and contribute to continuous improvement initiatives across the organisation.

Skills

Information security governance

Risk management frameworks

ISO/IEC 27001

ISM

PSPF

Regulatory compliance

Audits & assurance

Stakeholder engagement

Education

Tertiary qualification in Information Security / Cyber Security

CRISC, CISM or CISA certification

Bachelor's degree in a related field

Job description

APM is seeking a Senior Compliance Analyst in Australia to strengthen our compliance program. You will ensure digital systems, security controls, and business processes meet regulatory and contractual obligations, and you will guide risk management, governance, and assurance activities.

You will lead assessments, maintain obligation registers, monitor regulatory changes, and collaborate with business and technology teams to enhance security controls and compliance maturity across the