MediRecords is transforming the future of healthcare technology. Our cutting-edge, cloud-based solutions equip healthcare providers with modern, intelligent tools that streamline workflows and elevate patient care. Trusted by doctors, multidisciplinary clinics, hospitals, and government departments across Australia, we are a fast-growing organisation that values collaboration, integrity, and innovation.

About the role

We are seeking a Risk and Compliance Lead to join MediRecords, responsible for developing, implementing, and overseeing risk and compliance frameworks aligned with business strategy, regulatory requirements, and internal standards locally and globally, including in relation to Artificial Intelligence and emerging technologies.

This role will lead risk assessments, manage investigations into potential breaches, and promote a strong culture of compliance across the organisation. It requires strong analytical skills, attention to detail, and the ability to communicate complex requirements clearly to a range of stakeholders.

You will work cross-functionally with teams across Engineering, DevOps, Product, Finance, People & Culture, Operations, Customer-facing teams, Support, and external vendors.

Role Responsibilities

- Monitor and interpret regulatory requirements across risk, compliance, privacy, security, and emerging technologies (including AI)
- Conduct risk assessments, internal audits, and compliance reviews to identify and mitigate risks
- Lead investigations into incidents and breaches, including root cause analysis and corrective actions
- Maintain risk frameworks, registers, and reporting for senior leadership
- Oversee privacy management, including data protection impact assessments, breach response,



and personal data requests
- Support internal and external audits, certifications, and regulatory inspections
- Develop, implement, and maintain policies and procedures across risk, privacy, and security
- Ensure ongoing compliance with key standards and frameworks (e.g. ISO, SOC, GDPR, HIPAA)
- Support the implementation of systems and tools to manage compliance and certifications
- Champion a strong risk and compliance culture through training, education, and guidance
- Partner cross-functionally to embed risk, privacy, and security into operations, product development, and processes
- Provide guidance on the ethical and compliant use of emerging technologies, including AI

About you

- 5+ years’ experience in risk management or compliance roles, ideally within healthcare or other highly regulated environments
- Strong understanding of Australian regulatory frameworks, including the Privacy Act, WHS Act, and My Health Records Act
- Relevant professional certifications (e.g. CRMA, GRC certification, CIA, CCEP, ICA) are highly regarded
- Experience using GRC platforms and tools such as Vanta, Drata, or similar audit and incident management systems
- Solid knowledge of healthcare and security compliance frameworks (e.g. HIPAA, ISO 27001, SOC 2)
- Excellent communication and collaboration skills, with the ability to engage effectively across both technical and non-technical teams

What You’ll Enjoy

- Ongoing training and professional development to support your career growth.
- Regular team-building activities and social events that foster connection and collaboration.
- A personal wellbeing / birthday leave day.
- A flexible hybrid work model, balancing working from home with 2 days in-office per week.

📌 Risk and Compliance Lead (North Sydney)
🏢 Medirecords
📍 North Sydney