The Company

Some jobs are measured by what they produce. This one is measured by what never happens. The events that come back without incident. The policy that was current on the day somebody finally needed to read it. The hazard that was closed out three weeks before it could hurt anyone. Done properly, risk and compliance work is close to invisible, which is exactly why the organisations that take it seriously are the ones worth working for.

This is an organisation on the corridor between Brisbane and the Gold Coast, far enough south that the commute runs against the traffic. It is not a corporate environment. Everybody knows everybody, and the culture is properly down to earth with no veneer over the top of it. Visitors tend to notice the kind nature of everyone within about ten minutes.

What is unusual here is the starting point. The organisation has already invested in this function rather than bolting it onto somebody else's job. The policy library, the risk framework, the incident reporting and the training register are built and running in dedicated software, and the current incumbent leaves the seat in good order. So the agenda is not repair. It is stewardship and improvement, in a place small enough that one person can genuinely change how it operates.

The Role

Reporting directly to the CFO, this Risk and Compliance Officer role owns risk, compliance and workplace health and safety across the organisation. It is a standalone position, which means you are not one of four compliance officers dividing up a function between you. There is no layer sitting between you and the person who runs the business side of the organisation.

The job has two halves. The policy library and the board approvals, the papers for the Risk and Compliance Committee, the risk assessment on every event in the calendar, and every incident from the first report through to close out. The second half is the people, and it is worth being precise about what that means here. In most compliance roles the hard part is the framework. You inherit a stale register,



a policy set nobody has opened in three years and a system that does not talk to anything else. None of that applies. The framework is built and it works. The hard part here is that a organisation is not a compliance environment by nature. Your job is to move that culture forward, one conversation and one training session at a time, and you will be given the room and the backing to do it.

Duties & Responsibilities

- Maintaining the organisation's policy library, reviewing and updating policies and preparing them for board approval

- Preparing papers and reporting for the Risk and Compliance Committee, and keeping the risk register current

- Completing risk assessments for events alongside senior stakeholders

- Overseeing incident reporting end to end, from the initial report through investigation and hazard identification to close out

- Designing and delivering staff training across safety procedures

- Administering the compliance and policy software across the incident, training and policy modules

- Maintaining compliance records and training registers

- Partnering with heads of department, first aid and administration to lift compliance practice across the organisation

- Identifying unsafe practice, raising it directly with the people involved and following it through to resolution

About You

You are the kind of risk and compliance qualified who reads a room as well as you read a regulation, and you will need both here. You know that compliance is not enforcement, that nobody was ever won over by a policy reference, and that the person doing the unsafe thing is almost always busy rather than reckless. You can walk over, say something, be heard,



and have them still be pleased to see you the following week.

Confidence, warmth and common sense sound like ordinary things to ask for. They are rarer than they should be in this discipline, and they are what this organisation is actually looking for. What matters more is that you are quick and organised enough to carry real volume without letting the detail slip, and that you want to own a whole function rather than a slice of one.

Skills & Experience

To be effective in this Risk and Compliance Officer role, you will likely bring:

- Three years in a risk, compliance or workplace health and safety role

- Genuine policy capability, meaning you have written and reviewed policy rather than administered somebody else's

- Experience preparing papers for a board or a committee

- Confidence delivering training to rooms full of adults who did not necessarily ask for it

- Formal training in risk and compliance, which will stand out

What's on Offer

Part of what makes this worth doing is where you would be doing it. This is a supportive team in a organisation that runs on relationships rather than hierarchy, and the compliance seat sits inside that team rather than off to the side of it. The CFO you would report to is not a micromanager and says so plainly.

- A function that is already built, so your time goes into improving it rather than constructing it from a spreadsheet

- A salary aligned to experience under the plus superannuation, salary packaging and novated leasing

- Genuine flexibility on start and finish times, whether that is an early start and an early finish or a later start as well as 2 days WFH during quiet periods.

- The exposure across the whole function in one seat, covering policy, risk, incident management, workplace health and safety, fire safety and training

Apply Now

Click Apply Now to submit your application or contact Fran Dugdale at P&C; Partners for a confidential discussion. All applications will be treated in the strictest confidence.

📌 Risk and Compliance Officer (Brisbane)
🏢 P&C Partners
📍 Brisbane