1

12/10/2026 09:52:45 AEDT

ICT Labour Hire RFQ

LH-07970 - 1 Risk Management Specialist

RFQ type DMP2 - ICT Labour Hire

RFQ ID LH-07970

RFQ published date Friday, 09 October 2026

Deadline for asking questions

Thursday, 22 October 2026 • 11:59pm, Canberra time

RFQ closing date Friday, 23 October 2026 • 11:59pm, Canberra time

Buyer Australian Electoral Commission

Buyer contact [email protected]

Estimated start date Tuesday, 03 November 2026

Initial contract duration

ASAP to 07 May 2026

Extension term Other

Maximum number of candidates per seller

2

Experience level EL1 equivalent

Location of work QLD, WA, ACT, VIC, NSW, NT, SA, TAS

Working arrangements type

Hybrid A preference for candidates to perform the role in Canberra,

although other AEC office locations will be considered.

- Flexible working arrangements (i.e. a combination of onsite

Working arrangements

2

12/10/2026 09:52:45 AEDT attendance at an AEC office and remote working) will be considered

- Candidates who are only available to work remotely will be considered; however, they will need to demonstrate strong and effective communication and stakeholder relationship skills.

Maximum hours 40 hours per week

Security clearance Must be able to obtain Baseline

Job details The AEC is undertaking the implementation of a new Agency Risk Management Tool to strengthen organisational risk management capability, improve risk reporting, support compliance obligations, and enhance decision-making across the agency.

The Risk Specialist will provide subject matter expertise throughout the implementation lifecycle, ensuring that the agency's risk management framework, processes, controls, reporting requirements, and governance arrangements are effectively translated into the new tool.

Key duties and responsibilities The Risk Specialist will be responsible for, but not limited, to:

Analyse the agency's current risk management framework, policies, procedures, and reporting requirements.

•

Ensure the new tool is configured to support the agency's enterprise, strategic, operational,

project, and compliance risk processes.

•

Review and validate risk taxonomy, categories, consequence and likelihood matrices,

treatment plans, control libraries, and reporting structures.

•

Translate risk management and governance requirements into detailed system configuration specifications.

•

Provide specialist advice during solution design, configuration, testing, and deployment activities.

•

Assist in developing and executing user acceptance testing (UAT) scenarios and test cases.•

Support updating the AEC’s documentation (ie current risk management framework, policies,

procedures, and reporting requirements)



where required to enable an out of the box adoption

•

3

12/10/2026 09:52:45 AEDT of the new tool, whilst ensuring the agency remains compliant with the Commonwealth Risk

Management Policy, and APS governance requirements.

Additional services

Technical skills

About the team The Enabling Eight Program is a strategic initiative designed to modernise and streamline the

AEC’s core corporate systems. Launched in mid-2025, this initiative brings together eight essential platforms under a coordinate program to ensure our agency remains efficient, secure,

and responsive to the needs of all staff.

About the project

About the organisation

Criteria The buyer has specified that each candidate must provide a one page pitch to address all criteria specified. This is equal to 5000 characters.

Essential criteria

- • Demonstrated experience (minimum 5 years) in enterprise risk management within the

Australian Public Sector or similarly regulated environment. • Demonstrated experience supporting the implementation, enhancement, or optimisation of a risk management information system, GRC platform, or similar governance solution. • Demonstrated understanding of: - Commonwealth Risk Management Policy - Public Governance,

Performance and Accountability Act 2013 (PGPA Act) - APS governance and assurance frameworks - Risk reporting and accountability requirements • Highly developed written and verbal communication skills, including the ability to produce clear documentation,

reports, briefing papers, and training materials. • Hold or be able to obtain AGSVA

Baseline Clearance.

- Your submission must include 1 PDF attachment with no more than 5 pages, containing all requested information below. (Only 1 PDF should be uploaded per submission.)

2.

4

12/10/2026 09:52:45 AEDT

- Candidate availability to commence (e.g. 2 weeks' notice) • Confirmation that

Australian Citizenship is held - proof may be requested • Current Security Clearance held

- Candidate location • Notice of planned leave exceeding one week • Notice of whether the submitted candidate will also be engaged in secondary employment elsewhere

(if so, please confirm in what capacity) • Consultant comments - no more than 500

words,



speaking to the suitability of the submitted candidate for the position • Cover page responding to the mandatory criteria - please ensure this response does not exceed 1 page in length • Candidate resume - please ensure the candidate's resume is no more than 3

pages, and that you do not include any rate information within this document

Desirable criteria

- • Previous experience implementing risk management solutions within a Commonwealth

Government department or APS agency. • Experience configuring or supporting

ServiceNow Integrated Risk Management Module/GRC • Experience supporting data cleansing, migration, and validation activities for risk-related information. • Experience designing dashboards, risk reports, executive reporting packs, and performance metrics.

Additional requirements

- Your submission must include 1 PDF attachment containing all requested information below. (Only 1 PDF should be uploaded per submission. Select Yes/No below to indicate if information has been added)

Receive back: Attachment

- Candidate availability to commence (e.g. 2 weeks' notice)

Receive back: Yes/No response

- Confirmation that Australian Citizenship is held - proof may be requested

Receive back: Yes/No response

- Current Security Clearance held

Receive back: Yes/No response

- Candidate location

Receive back: Yes/No response

Notice of planned leave exceeding one week6.

5

12/10/2026 09:52:45 AEDT

Receive back: Yes/No response

- Notice of whether the submitted candidate will also be engaged in secondary employment elsewhere (if so, please confirm in what capacity)

Receive back: Yes/No response

- Consultant comments - no more than 500 words, speaking to the suitability of the submitted candidate for the position

Receive back: Yes/No response

- Cover page responding to the mandatory criteria - please ensure this response does not exceed 1 page in length

Receive back: Yes/No response

- Candidate resume - please ensure the candidate's resume is no more than 3 pages, and that you do not include any rate information within this document

Receive back: Yes/No response

Contract The buyer has chosen to use the Easy contract for this procurement.

Questions and answers

Questions Answers

9 October 2026, 5:13 PM

Can you please confirm the end date of the initial contract term as it says '07 May 2026'?

9 October 2026, 5:16 PM The end date of the initial contract term should be '07 May 2027'.

Responding to this opportunity For each candidate, you must include start date•

hourly rate•

6

12/10/2026 09:52:45 AEDT service management fee•

citizenship status•

security clearance•

one page pitch to address all criteria specified (this is equal to 5000 characters in BuyICT)•

resumés•

response to additional requirements•

📌 Risk Management Specialist (Australia)
🏢 SOS Recruitment
📍 Australia