APM Group Logo

APM Group

Senior Compliance Analyst

Posted One Month Ago
Be an Early Applicant
In-Office or Remote
Hiring Remotely in Sydney, New South Wales, AUS
Senior level
In-Office or Remote
Hiring Remotely in Sydney, New South Wales, AUS
Senior level
The Senior Compliance Analyst conducts information security and regulatory compliance assessments, audits, assurance reviews, and control effectiveness evaluations. The role maintains compliance obligations, policies, governance documentation, reports, and dashboards; monitors framework changes; coordinates remediation; supports certifications, customer security reviews, and regulatory reporting; and advises business and technology stakeholders on risk and control requirements.
The summary above was generated by AI
Job Description

About the Role

We are seeking an experienced and proactive Senior Compliance Analyst to join our growing Compliance team.

In this role, you will be responsible for ensuring our digital systems, security controls, and business processes meet regulatory, contractual, and industry compliance obligations. You will play a key role in maintaining and improving our compliance framework, supporting certifications and accreditations, conducting assessments, and providing expert guidance across the organisation.

This is an excellent opportunity for a compliance professional who enjoys working at the intersection of technology, risk management, governance, and regulatory compliance.

Key Responsibilities

  • Conduct compliance assessments against ISO 27001, ISM, PSPF, RFFR, contractual obligations, and other relevant regulatory requirements.
  • Provide expert guidance on compliance obligations, risk management, and controls to stakeholders across the business.
  • Maintain a register of applicable legal, regulatory, contractual, and policy obligations.
  • Monitor changes to security, regulatory, and government frameworks, assess impacts, and drive implementation of new requirements.
  • Partner with business and technology teams to implement, review, and enhance security controls and compliance measures.
  • Lead assurance reviews, audits, and control effectiveness assessments, identifying compliance gaps and coordinating remediation activities.
  • Plan and perform assurance reviews to evaluate control effectiveness and compliance maturity
  • Prepare compliance reports, dashboards, metrics, and governance committee updates.
  • Support customer security reviews, compliance questionnaires, audits and regulatory reporting activities.
  • Develop and maintain compliance policies, standards, procedures, and governance documentation.
  • Analyse compliance data, identify emerging risks and trends, and contribute to continuous improvement initiatives across the organisation.

About You

You are a highly analytical and detail-oriented compliance professional with a strong understanding of information security, compliance, and risk management frameworks. You thrive in complex environments, have excellent stakeholder management skills, and are passionate about helping organisations navigate compliance requirements while driving practical business outcomes.

 

Experience

  • Minimum 7 years' experience in IT compliance, information security, risk management, or a related field.
  • Strong understanding of risk management frameworks, methodologies, and governance principles.
  • Demonstrated experience working with compliance frameworks such as:
    • ISO/IEC 27001
    • Information Security Manual (ISM)
    • Protective Security Policy Framework (PSPF)
    • Other government, regulatory, or industry security frameworks
  • Experience conducting security assessments, audits, certification programs, and assurance activities.
  • Ability to interpret legal agreements, contractual requirements, and compliance obligations.
  • Strong analytical, reporting, documentation, and problem-solving skills.
  • Excellent communication and stakeholder engagement capabilities.
  • Strong organisational and project management skills.
  • High level of integrity, professionalism, and accountability.
  • A proactive, collaborative, and solution-focused approach.

Highly Desirable

  • Experience in highly regulated environments such as government, financial services, healthcare, or critical infrastructure.
  • Experience with AI governance, emerging technology risks, and related compliance considerations.
  • Experience managing ISO 27001 certification and security accreditation activities.

Desirable qualifications include:

  • Tertiary qualifications in Information Security, Cyber Security, Computer Science, Technology, Risk Management, or a related discipline.
  • CRISC, CISM, or CISA certification.
  • ISO 31000 Risk Management certification.
  • ISO 27001 Lead Auditor certification.

Why Join APM?

At APM, you'll have the opportunity to build a rewarding career while making a genuine difference in people's lives.

Our Benefits

  • Work-life balance with no weekend work
  • Opportunity to purchase additional annual leave
  • Discounted health insurance
  • Novated car leasing options
  • Paid parental leave
  • Service recognition programs
  • Career growth opportunities across APM's diverse health and human services brands
  • Ongoing learning and professional development
  • Access to a supportive, collaborative, and inclusive workplace culture

Our Commitment to Diversity

At APM, we are strengthened by diversity and committed to creating a workplace where everyone feels included, respected, and valued. We welcome applications from people of all ages, nationalities, abilities, and cultures, including Aboriginal and Torres Strait Islander peoples, members of the LGBTQIA+ community, and people living with disability.

Ready to make an impact?

Apply now and join a purpose-driven organisation where your expertise will help strengthen compliance, protect our business, and contribute to enabling better lives.

Apply Now

If you are a compliance professional looking to take the next step in your career and contribute to a strong culture of governance and integrity, we would love to hear from you.

Similar Jobs

16 Days Ago
Remote
Australia
Senior level
Senior level
Fintech • Financial Services • Cryptocurrency
Conduct complex AML and blockchain investigations to identify money laundering, terrorist financing, and other illicit activity. Analyze transaction monitoring and suspicious activity reporting requirements, identify compliance process gaps, recommend mitigations, and collaborate with financial institutions, regulators, law enforcement, legal teams, and blockchain companies. Stay current on cryptocurrency risks and regulations while supporting training and knowledge sharing.
Top Skills: Blockchain TechnologyChainalysisCryptocurrency ProtocolsDecentralized NetworksEllipticSolidus Labs
44 Minutes Ago
Easy Apply
Remote or Hybrid
Australia
Easy Apply
Entry level
Entry level
Artificial Intelligence • Cloud • Software
Support Vercel customers by resolving technical issues, handling community and enterprise requests, developing internal tools, completing engineering work, and improving documentation and processes. The role specializes in a product area, investigates root causes, and partners with engineering and customer success teams. It requires frontend development knowledge, cloud and serverless expertise, strong communication, technical writing, and availability for weekend and on-call rotations.
Top Skills: CdnsCi/CdCloud InfrastructureCloud TechnologiesDnsMonoreposNext.JsNode.jsReactServerless Computing
14 Hours Ago
Remote or Hybrid
Sydney, New South Wales, AUS
Junior
Junior
Cloud • Computer Vision • Information Technology • Sales • Security • Cybersecurity
Participate in a six-month cybersecurity graduate program within CrowdStrike’s Falcon Complete SOC. Triage, investigate, and respond to security alerts across endpoint, identity, email, and cloud environments; analyze EDR telemetry, logs, and forensic artifacts; communicate findings and recommendations to customers; and improve incident detection and response processes.
Top Skills: Active DirectoryAi ModelsBashCybersecurityEndpoint Detection And Response (Edr)LinuxmacOSMicrosoft 365Microsoft Entra IdMitre Att&CkOktaPowershellPrompt EngineeringPythonSecurity Information And Event Management (Siem)Windows

What you need to know about the Sydney Tech Scene

From opera to comedy shows, the Sydney Opera House hosts more than 1,600 performances a year, yet its entertainment sector isn't the only one taking center stage. The city's tech sector has earned a reputation as one of the fastest-growing in the region. More specifically, its IT sector stands out as the country's third-largest, growing at twice the rate of overall employment in the past decade as businesses continue to digitize their operations to stay competitive.

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account