The Governance Assurance Specialist is an Executive Level 2 Lower senior specialist role that leads governance, assurance, compliance and risk management activities across Information Technology Services. The role establishes, maintains and continuously improves governance frameworks, assurance practices, risk controls and compliance processes that provide senior leaders with clear visibility of governance performance, risk exposure, control effectiveness and compliance obligations in a public sector environment.

Working independently from commercial contract management functions, the Governance Assurance Specialist provides objective, evidence-based oversight of governance effectiveness, operational and project delivery controls, risk management practices, policy compliance and regulatory obligations. The role exercises sound judgement, discretion and skilled expertise in complex, sensitive or ambiguous matters.

The position supports informed, transparent and accountable senior executive decision-making by providing assurance that technology services, sourcing activities and strategic investments are delivered within approved governance frameworks, supported by effective controls and appropriate evidence. The role operates with a high degree of independence and influence, providing second-line oversight, challenge and assurance aligned with recognised industry practice including COBIT, ISO/IEC 27001 and the Three Lines Model.

At its core, the role provides senior executive assurance that IT Services is managing risks, complying with policies and operating effective governance controls across services, projects, sourcing activities and technology investments, consistent with APS values, public sector stewardship and accountable use of public resources.

The key duties of the position include:

Shapes Strategic Thinking

- Translate enterprise and IT Services strategy into clear governance, risk, compliance and assurance frameworks that provide direction, purpose and accountability across the work area.
- Define governance standards, decision authorities, risk ownership, control expectations and assurance practices that align enterprise objectives, whole-of-government obligations and accountable technology delivery.
- Gather, analyse and interpret information from assurance reviews, audits, risk registers, compliance data and stakeholder feedback to identify critical issues, opportunities and long-term improvement priorities.
- Apply objective, critical analysis and sound judgement to complex governance, risk, control and compliance matters, developing practical options that minimise risk and support executive decision-making.
- Maintain awareness of public sector requirements, contemporary governance practice and industry standards, including COBIT, ISO/IEC 27001 and the Three Lines Model, to strengthen governance maturity.

Achieves Results





- Lead complex governance and assurance reviews across ICT services, programs, projects, sourcing initiatives and technology investments, establishing clear plans, priorities, timeframes and expected outcomes.
- Monitor compliance with internal policies, frameworks, standards, delegated authorities, regulatory obligations and relevant public sector governance requirements, adjusting assurance activity as risks and priorities change.
- Coordinate internal and external audit activities, management responses, evidence collection and remediation tracking, ensuring ownership, documentation, closure and reporting are maintained.
- Build organisational capability by maintaining governance reporting, risk registers, assurance schedules, control records, compliance evidence and decision records that support reliable assurance and repeatable governance practice.
- Deliver intended outcomes by assessing control effectiveness, monitoring remediation activities and providing governance performance reporting, compliance dashboards and maturity assessments that strengthen senior executive visibility, assurance and accountability.

Cultivates Productive Working Relationships

- Build and sustain productive relationships with senior service owners, program managers and vendor management teams to improve governance capability, risk ownership and control maturity across complex technology environments.
- Work collaboratively with enterprise risk, internal audit, cyber security, procurement, compliance and executive governance functions to identify shared priorities and achieve mutually beneficial governance outcomes.
- Facilitate governance forums and assurance reviews across diverse stakeholder groups, valuing different perspectives and building shared commitment to enterprise priorities and assurance outcomes.
- Guide and coach stakeholders to strengthen understanding of governance responsibilities, compliance obligations, control requirements and risk management disciplines.
- Recognise and draw on specialist expertise across the organisation, consulting internally and externally where appropriate to support high-quality assurance outcomes.

Exemplifies Personal Drive and Integrity

- Provide independent, objective and evidence-based assurance on governance effectiveness, risk management, policy compliance and control performance, demonstrating integrity, impartiality and sound public sector judgement.
- Model accountability, transparency, ethical decision-making and adherence to approved governance processes, APS Values,



internal policies and regulatory obligations.
- Identify emerging governance, operational, security and compliance risks, anticipate impacts and ensure appropriate controls, registers and mitigation strategies are maintained.
- Exercise resilience, discretion and sound judgement in balancing risk, control, compliance, service performance and delivery outcomes in complex, sensitive or ambiguous public sector environments.
- Commit to continuous improvement in governance maturity, control effectiveness, assurance practices and organisational integrity across IT Services.

Communicates with Influence

- Communicate complex governance, risk, compliance and assurance information clearly and persuasively for senior executive, governance committee and audit audiences.
- Present logical, evidence-based arguments that distil core issues, identify options and support informed decision-making.
- Influence stakeholders through credible advice, constructive challenge and clear recommendations that strengthen governance discipline, risk ownership, control effectiveness, compliance performance and assurance maturity.
- Prepare high-quality governance papers, audit responses, assurance reports and executive briefings that are concise, accurate, balanced and tailored to the audience.
- Negotiate and present evidence-based recommendations that improve governance effectiveness, risk visibility, control maturity and compliance outcomes.

Getting to know the Bureau of Meteorology

The Bureau of Meteorology is one of the few organisations that touches the lives of all Australians and all Australia, every day. The Bureau works across Australia and remote islands, providing services from the Antarctic to beyond the equator, and from the Indian Ocean to the Pacific. We are Australia's national weather, climate and water agency, in the Agriculture, Water and Environment portfolio of the Australian Government, operating under the authority of the Meteorology Act 1955 and the Water Act 2007. We provide data, information, knowledge, insight and wisdom to help Australians prepare and respond to the realities of their natural environment, including droughts, floods, fires, storms, tsunami and tropical cyclones. Our products and services include observations, forecasts, analysis and advice covering Australia's atmosphere, water, oceans and space environments. We undertake focused scientific research in support of our operations and services. Through regular forecasts, warnings, monitoring and advice, we provide one of Australia's most fundamental and widely used public services. We have strong relationships with our customers, partners and stakeholders in Australia, including the Australian Community and the emergency services sectors, all-levels of Government, and focus sectors including aviation, agriculture, energy and resources, national security and water.

📌 Governance Assurance Specialist (Melbourne)
🏢 Bureau Of Meteorology
📍 Melbourne