Profectus is seeking an experienced Risk Management Specialist to support the implementation of a new enterprise risk management tool within an Australian Government agency. You will provide subject matter expertise to translate the agency’s risk policies, processes, controls and reporting requirements into the recent system. The work covers requirements analysis, configuration specification, user acceptance testing and documentation updates.

Key Responsibilities

- Analyse the agency’s current risk management policies, procedures and reporting requirements
- Ensure the new tool is configured to support enterprise, strategic, operational, project and compliance risk processes
- Review and validate risk taxonomy, categories, consequence and likelihood matrices, treatment plans and control libraries
- Translate risk management and governance requirements into detailed system configuration specifications
- Provide specialist advice during solution design, configuration, testing and deployment
- Develop and execute user acceptance testing scenarios and test cases
- Update risk management policies, procedures and reporting documentation to support out of the box adoption of the tool
- Maintain alignment with the Commonwealth Risk Management Policy and APS governance requirements throughout implementation
- Support data cleansing, migration and validation of existing risk information
- Contribute to the design of dashboards, risk reports and executive reporting packs

Required Experience

- Minimum 5 years’ experience in enterprise risk management within the Australian Public Sector or a similarly regulated environment




- Experience supporting the implementation, enhancement or optimisation of a risk management information system, GRC platform or similar governance solution
- Sound working knowledge of the Commonwealth Risk Management Policy
- Understanding of the Public Governance, Performance and Accountability Act 2013 (PGPA Act)
- Understanding of APS governance and assurance arrangements, including risk reporting and accountability requirements
- Ability to translate business and policy requirements into system configuration specifications
- Strong written and verbal communication skills, including documentation, reports, briefing papers and training materials

Desirable Experience

- Implementing risk management solutions within a Commonwealth department or APS agency
- Configuring or supporting ServiceNow Integrated Risk Management (IRM) or GRC modules
- Data cleansing, migration and validation for risk-related information
- Designing dashboards, risk reports, executive reporting packs and performance metrics
- User acceptance testing on enterprise system implementations

Security Clearance Requirements

- Must be an Australian Citizen
- Must have an AGSVA Baseline Security Clearance

Working Arrangements

- Hybrid
- Canberra preferred, other capital cities considered

Why Profectus Profectus partners with Australian Government agencies to deliver trusted ICT capability across complex delivery programs. We take a long term, relationship driven approach, supporting our people across the full lifecycle of their engagement while contributing to outcomes of national importance.

📌 Risk Management Specialist (Canberra)
🏢 Profectus
📍 Canberra