About the opportunity Have you helped configure or roll out a risk management system in government or a regulated industry? This role suits APS risk managers or Line 2 operational risk professionals who know how a risk framework should translate into a tool.

A Federal Government agency is implementing a new Agency Risk Management Tool to lift risk capability, sharpen reporting, support compliance obligations and improve decision making.

You’ll be the risk subject matter expert across the whole implementation, making sure the agency’s framework, controls, reporting and governance carry across properly into the new system.

Please note:

this is an enterprise risk management role. It is not a cyber security, IT audit or ICT accreditation role.

What you’ll be doing

Reviewing the current risk framework, policies, procedures and reporting requirements

Making sure the tool supports enterprise, strategic, operational, project and compliance risk

Validating the risk taxonomy, likelihood and consequence matrices, treatment plans, control libraries and reporting structures

Turning risk and governance requirements into detailed configuration specifications

Advising through design, configuration, testing and deployment

Developing and running UAT scenarios and test cases





Updating framework documentation so the agency can adopt the tool out of the box while staying compliant with the Commonwealth Risk Management Policy

What you’ll bring

5+ years in enterprise risk management in the Australian Public Sector or a similarly regulated setting (for example APRA regulated)

Experience supporting the implementation or optimisation of a risk management system or GRC platform

Solid understanding of the Commonwealth Risk Management Policy, the PGPA Act, APS governance and assurance frameworks and risk reporting requirements

Excellent written and verbal communication, including documentation, briefing papers and training materials

Australian citizenship and the ability to obtain an AGSVA Baseline clearance

Highly regarded

Implementing risk solutions in a Commonwealth department or APS agency

Hands on experience with tools such as ServiceNow IRM, Predict, Archer, Protecht, Riskware or CammsRisk

Risk data cleansing, migration and validation

Designing dashboards, executive reporting packs and performance metrics

The details

EL1 equivalent contract starting Tuesday 3 November 2026

Initial term to 7 May 2027 with up to 4 extensions (24 months maximum)

Up to 40 hours per week

Canberra preferred - candidates in any capital city with an agency office will be considered

Hybrid working available

📌 Enterprise Risk Specialist (Canberra)
🏢 Montagu Group
📍 Canberra