Job Description

n

The Risk & Compliance Analyst plays a key Line 2 oversight role in strengthening enterprise-wide risk management, risk & compliance governance and resilience. The role supports independent challenge, insights-driven analysis, and high-quality risk and compliance reporting to support Executive and Board decision-making.

n

A critical focus of the role is supporting the organisation in maturing risk & compliance management including APRA CPS 230 by enhancing risk & compliance practices. The role also enhances data integrity, predictive analytics and real-time monitoring across the GRC environment to enable proactive identification of emerging risks and control weaknesses.

KEY RESPONSIBILITIES Risk & Compliance Reporting, Insights and Analytics n

n
- Develop, maintain, and continuously enhance enterprise risk, compliance and resilience dashboards with predictive and early-warning indicators.
n
- Produce high-quality, insight-driven reporting for the Board, Executive and Risk Committees, translating complex risk, compliance and resilience data into succinct senior-level narratives.
n
- Support deep-dive / thematic analysis on emerging risks, operational incidents, breaches, change-related impacts and resilience vulnerabilities.
n
- Develop trend, scenario-based and predictive insights to support proactive management of risk exposures and regulatory obligations.
n
- Ensure continual Risk & Compliance oversight of GRC data
n

GRC Systems, Data Quality & Technology Enablement n

n
- Serve as a functional specialist for the enterprise GRC platform (e.g., Protecht, Archer), including workflow, taxonomy, hierarchy and data model design.
n
- Maintain and enhance GRC data structures to improve accuracy, completeness, lineage, and integrity of risk-related data.
n




- Partner with technology teams to optimise system integrations and automation to enhance real-time reporting capability.
n
- Conduct recurring data quality reviews, integrity testing and cleansing to ensure reliable operational risk, resilience and compliance data for decision-making.
n

CPS 230 Operational Risk & Resilience Oversight n

n
- Have effective understanding of Operational Risk and Compliance frameworks, structures and approaches including APRA & ASIC requirements.
n
- Support Line 2 oversight of operational risk management consistent with APRA CPS 230, including operational risk profile development, control effectiveness monitoring and exposure trend analysis.
n
- Assist in the review and challenge of critical operations mapping, impact tolerances, scenario testing design, results analysis and resilience uplift activities.
n
- Supporting Line 2 analysis of root causes, escalation quality, recovery timeframes and compliance with CPS 230 reporting expectations.
n

Governance, Compliance & Regulatory Support n

n
- Support monitoring and reporting of regulatory obligations including APRA and ASIC requirements.
n
- Assist in uplift of frameworks, policies, and procedures in line with evolving regulatory expectations
n
- Monitor adherence to the risk appetite statement and thresholds, advising where metrics indicate deteriorating risk posture.
n




- Manage Line 2 thematic reviews and targeted control assessments to provide assurance over key risk and compliance domains.
n

Stakeholder Engagement, Culture & Capability Uplift n

n
- Promote a strong risk, compliance and resilience culture across the organisation through training, coaching and advisory support.
n
- Build relationships with business units, change teams and service provider oversight teams to uplift risk literacy and effective risk management behaviours.
n
- Provide tailored Line 2 guidance to improve understanding and usage of GRC tools, and quality of reporting inputs.
n
- Collaborate across business functions to ensure clear, consistent, and timely risk management communications.
n

ROLE REQUIREMENTS n

n
- Reporting: This role reports to the Manager, Risk
n
- Education: Bachelor’s degree in finance, Business, Risk Management, or a related field. A professional certification (e.g., CA, CFA, FRM) is highly regarded.
n
- Experience: 3-8 years of experience in risk & compliance management in financial services in Australia or similar regulated jurisdiction.
n
- Technical Skills
n
- Demonstrated understanding of APRA and ASIC regulations, with strong working knowledge of CPS 230, CPS 220, CPS 234 and risk in change governance.
n
- Advanced analytical and problem-solving skills, including use of BI tools, data modelling and predictive analytics.
n
- Strong capability in GRC platforms and risk data structures.
n
- Ability to interpret and communicate complex risk and resilience insights to Executive-level audience.
n
- Personal Attributes:
n
- High ethical standards and integrity.
n
- Detail-oriented with a proactive approach to risk & compliance management.
n
- Strong organisational and time management skills.
n
- Ability to work in a dynamic and fast-paced workplace.
n

n

#J-18808-Ljbffr

📌 Risk and Compliance Analyst (New South Wales)
🏢 Europ Assistance Australia and New Zealand
📍 New South Wales