Risk and Governance Analyst

About this role

We're looking for a proactive Risk and Governance Analyst to join our Digital Operations team based in Tomago. This is an exciting opportunity to play a key role in strengthening Ampcontrol's digital risk, governance and cyber security framework while supporting continuous improvement across the business.

What you'll do

As the Risk and Governance Analyst, you'll support the assessment, maintenance and continuous improvement of Ampcontrol's digital risk, IT governance and cyber security control environment. Working closely with technical and business stakeholders, you'll help ensure governance obligations are met, controls remain effective, and key risks are identified and managed appropriately.

Key responsibilities include

• Support the assessment, maintenance and continuous improvement of digital risk, IT governance and cyber security controls
• Maintain governance policies, procedures, registers, control documentation, evidence repositories, risk registers, control matrices and policy exceptions
• Assist with cyber security and technology risk assessments, compliance reviews, control monitoring and information security reviews for tenders, contracts and third-party engagements
• Coordinate evidence collection and documentation for internal and external audits
• Track audit findings, actions and governance improvement initiatives through to completion
• Monitor adherence to policies, procedures and control requirements across Digital & Delivery teams and support governance requirements across digital projects and business change initiatives
• Prepare risk, governance and cyber security reporting for management and key stakeholders, while supporting security awareness, governance education and policy communication across the business

What we're looking for

You will be an analytical and detail-oriented professional with strong communication skills and a passion for governance, risk and cyber security. You'll be comfortable working across both technical and business environments, providing practical advice and supporting continuous improvement initiatives.

Ideally, you'll bring

• A degree in Information Technology, Cyber Security, Risk, Governance, Business or a related discipline, or equivalent industry experience
• Experience supporting IT governance, cyber security, risk management or compliance functions, including risk registers, policies, audit activities and control documentation
• Knowledge of governance frameworks such as ISO 27001, Essential Eight, ITIL or similar standards
• Strong communication and stakeholder engagement skills, with experience working with auditors, technical teams and business stakeholders and the ability to translate technical concepts into business language
• Strong organisational skills, the ability to manage competing priorities effectively and a proactive approach to identifying risks, control gaps and improvement opportunities

Employee Benefits

At Ampcontrol, we recognise that our people are key to our success. In return for your contribution, we offer a range of benefits to support your career, wellbeing and lifestyle, including:

• Flexible work arrangements
• Paid parental leave
• Salary packaging options
• Discounted private health care
• Wellbeing programs and employee discounts
• Education assistance and ongoing career development opportunities

Ready to challenge the future?

Then apply now! If you are intrigued or excited by what you have read, then we want to hear from you. You can learn more about what it’s like to work at Ampcontrol by visiting www.ampcontrolgroup.com

We value Equity, Diversity and Inclusion and are committed to Reconciliation through our Reflect Reconciliation Action Plan. Join us in our journey towards Reconciliation and making a meaningful impact in the community.

Video

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.