Enterprise Technology Risk & Compliance Analyst
This role is pivotal in managing IT-related risks and ensuring our business adheres to regulatory requirements and other relevant compliance across Australia and New Zealand.
At Downer, we plan, create, and sustain.
Downer is the leading provider of integrated services in Australia and New Zealand.
Through trusted relationships and world-leading insight, we work closely with our customers to design, build, and sustain assets, infrastructure, and facilities.
We are seeking a talented
IT Risk & Compliance Analyst
to join our team.
This role can be based in Sydney, Melbourne, Brisbane, or Auckland, New Zealand, with Hybrid Working options available.
Technology Risk & Compliance Analysis is critical in managing and driving operational risk and controls to uplift the maturity of Downer's technology risk management function.
You will partner with operational teams to:
Identify, communicate, measure, assess, and oversee technology risks.
Support risk processes and registers, maintaining a high level of accuracy and currency of content.
Continuously monitor the status of risk treatment actions related to risks and findings.
Provide input and maintain our risk management framework.
Support and facilitate audit and compliance activities as it relates to ISMS standards, internal and external audits in collaboration with internal and external auditors; and provide support and assistance in responding to audit findings and recommendations.
Monitor regulatory requirements, industry standards, and best practices related to IT risk management and assurance, and ensure compliance with applicable laws, regulations, and guidelines.
Skills and Experience
3+ years in enterprise technology risk management and compliance role.
Prior experience in a compliance and/or regulatory environment and the adoption of ISO/IEC standards.
Experience/understanding of risk and security frameworks (e.g., ISO 27001, NIST).
Experience with risk assessment tools and technologies, and proficiency in data analysis and reporting.
Experience in Compliance management tool highly desirable.
Knowledge of risk management and compliance disciplines and experience in applying them in risk assessment and assurance activities.
Good understanding of the risk categories: operational risk, IT risk, project risk, third party risk, business risk.
Strong analytical and problem-solving skills with the ability to analyze complex IT systems and processes, identify risks and vulnerabilities, and recommend effective risk mitigation strategies.
Knowledge of regulatory requirements and compliance standards.
Qualifications
Bachelor's degree in information technology, computer science, business administration, or a related field.
Certifications in Audit (CISA), Risk Management, and Project Management highly desirable.
Click "Apply Now".
*** Please Note: Applications will not be accepted by email.
Downer Group is an employer that acknowledges and embraces the importance of our people's diverse experiences, talents, and cultures.
As an inclusive employer, we welcome applications from everyone.
Please note, screening and interviews may take place prior to the closing date - applications may also close before this date.
#J-18808-Ljbffr
