Business / Risk Analyst (Critical Infrastructure & SOCI Compliance)

Location: Melbourne (2 days per week in office)
Contract length: until Jun 2027 + extensions
Daily rate: $900-1000 + super

About

An exciting opportunity exists for an experienced Business / Risk Analyst to join a large organisation operating critical infrastructure assets across Australia.

This role will support a major compliance and risk initiative focused on meeting enhanced obligations under Australia's Security of Critical Infrastructure (SOCI) Act and Critical Infrastructure Risk Management Program (CIRMP) requirements.

Working across Operations, Risk, Compliance, IT and Operational Technology (OT) teams, you will lead and facilitate risk assessments, evaluate the effectiveness of existing controls, identify gaps, and develop practical remediation plans across operational assets.

This is a highly visible program where your work will directly influence regulatory compliance, operational resilience and risk management outcomes.

Responsibilities

- Lead and support enhanced CIRMP risk assessments across critical infrastructure assets.
- Facilitate workshops with Risk Owners, operational teams and subject matter experts.
- Identify and assess material risk scenarios, existing controls, control effectiveness and residual risk.
- Gather, validate and assess supporting evidence and maintain clear audit-ready assessment records.
- Identify control gaps, dependencies and areas requiring remediation.
- Map assessment outcomes against SOCI, CIRMP and relevant regulatory requirements.
- Develop practical remediation actions, including ownership, priorities and delivery timeframes.
- Prepare assessment outputs for governance forums, executive reporting and assurance activities.
- Work closely with Compliance,



Project Management and operational stakeholders to drive assessment outcomes.

Required Experience

- Demonstrated experience as a Business Analyst and/or Risk Analyst within complex regulatory, operational or risk environments.
- Strong experience conducting:
- Risk assessments
- Control effectiveness reviews
- Gap analysis
- Evidence collection and validation
- Remediation planning

- Excellent stakeholder engagement and workshop facilitation skills.
- Ability to analyse complex operational, technical and regulatory information and translate findings into practical business outcomes.
- Experience working within critical infrastructure, utilities, industrial or operational environments.

Highly desirable:

- Power generation experience.
- Utilities sector experience (energy, gas or water).
- Knowledge of the SOCI Act and CIRMP framework.
- Exposure to Operational Technology (OT) environments.
- Experience undertaking site-based operational risk assessments.
- Knowledge of AESCSF or comparable security, risk or compliance frameworks.

Why Apply

- Be part of a high-profile regulatory and compliance program with organisation-wide impact.
- Work on critical infrastructure assets that play an essential role in Australia's energy landscape.
- Join a team-oriented team working across risk, compliance, operations and project delivery.
- Opportunity to influence risk management outcomes and shape remediation activities from inception through delivery.
- Long-term contract opportunity through to June 2027, with potential for extension.
- Hybrid working environment with exposure to both corporate and operational stakeholders.
- Opportunity to utilise a unique blend of business analysis, risk management and critical infrastructure expertise in a highly sought-after market.

📌 Business / Risk Analyst - Critical Infrastructure & SOCI (Melbourne)
🏢 Precision Sourcing
📍 Melbourne