Risk Management Specialist

Business Review Group is seeking an experienced Risk Management Specialist to support a Commonwealth Government agency with the implementation of a new enterprise risk management tool.

The successful candidate will provide specialist risk and governance advice throughout the implementation lifecycle, ensuring the agency's risk framework, processes, controls and reporting requirements are effectively translated into the new system.

The role

The Risk Management Specialist will:

- Review the agency's existing risk management framework, policies, procedures and reporting requirements.
- Ensure the new tool supports enterprise, strategic, operational, project and compliance risk management.
- Review and validate risk taxonomies, categories, consequence and likelihood matrices, treatment plans, control libraries and reporting structures.
- Translate risk management and governance requirements into clear system configuration specifications.
- Provide specialist advice across solution design, configuration, testing and deployment.
- Develop and execute user acceptance testing scenarios and test cases.
- Support risk-data cleansing, migration and validation activities.
- Assist with the development of dashboards, executive reporting packs and risk-performance measures.
- Update risk frameworks, policies, procedures and supporting documentation where required.




- Support an out-of-the-box implementation while maintaining compliance with Commonwealth risk and governance obligations.
- Engage with technical teams, business stakeholders and senior agency representatives throughout delivery.

About you

To be successful, you will have:

- A minimum of five years' experience in enterprise risk management within the Australian Public Service, Commonwealth Government or a similarly regulated setting.
- Experience implementing, enhancing or optimising a risk management information system, GRC platform or similar governance solution.
- Strong knowledge of the Commonwealth Risk Management Policy.
- A sound understanding of the Public Governance, Performance and Accountability Act 2013.
- Knowledge of APS governance, assurance, risk-reporting and accountability requirements.
- The ability to translate risk and governance requirements into practical system and configuration requirements.
- Strong written and verbal communication skills.
- Experience preparing policies, procedures, reports, briefing papers, training materials and other governance documentation.
- Australian citizenship.
- An active AGSVA Baseline security clearance and the ability to obtain NV1.

Experience with ServiceNow Integrated Risk Management or ServiceNow GRC will be highly regarded.

Role details

- Location: Canberra
- Contract: 1 October 2026 to 31 March 2027
- Level: EL1 equivalent
- Security clearance: Active Baseline with the ability to obtain NV1

📌 Risk Management Specialist (Canberra)
🏢 Business Review Group
📍 Canberra