MediRecords is transforming the future of healthcare technology.
Our creative, cloud-based solutions equip healthcare providers with modern, intelligent tools that streamline workflows and elevate patient care.
Trusted by doctors, multidisciplinary clinics, hospitals, and government departments across Australia, we are a fast-growing organisation that values collaboration, integrity, and innovation.About the roleWe are seeking a Risk and Compliance Lead to join MediRecords, responsible for developing, implementing, and overseeing risk and compliance frameworks aligned with business strategy, regulatory requirements, and internal standards locally and globally, including in relation to Artificial Intelligence and emerging technologies.This role will lead risk assessments, manage investigations into potential breaches, and promote a strong culture of compliance across the organisation.
It requires strong analytical skills, attention to detail, and the ability to communicate complex requirements clearly to a range of stakeholders.You will work cross-functionally with teams across Engineering, DevOps, Product, Finance, People & Culture, Operations, Customer-facing teams, Support, and external vendors.Role ResponsibilitiesMonitor and interpret regulatory requirements across risk, compliance, privacy, security, and emerging technologies (including AI)Conduct risk assessments, internal audits, and compliance reviews to identify and mitigate risksLead investigations into incidents and breaches, including root cause analysis and corrective actionsMaintain risk frameworks, registers, and reporting for senior leadershipOversee privacy management, including data protection impact assessments, breach response,



and personal data requestsSupport internal and external audits, certifications, and regulatory inspectionsDevelop, implement, and maintain policies and procedures across risk, privacy, and securityEnsure ongoing compliance with key standards and frameworks (e.g. ISO, SOC, GDPR, HIPAA)Support the implementation of systems and tools to manage compliance and certificationsChampion a strong risk and compliance culture through training, education, and guidancePartner cross-functionally to embed risk, privacy, and security into operations, product development, and processesProvide guidance on the ethical and compliant use of emerging technologies, including AIAbout you5+ years' experience in risk management or compliance roles, ideally within healthcare or other highly regulated environmentsStrong understanding of Australian regulatory frameworks, including the Privacy Act, WHS Act, and My Health Records ActRelevant professional certifications (e.g. CRMA, GRC certification, CIA, CCEP, ICA) are highly regardedExperience using GRC platforms and tools such as Vanta, Drata, or similar audit and incident management systemsSolid knowledge of healthcare and security compliance frameworks (e.g. HIPAA, ISO *****, SOC 2)Excellent communication and collaboration skills, with the ability to engage effectively across both technical and non-technical teamsWhat You'll EnjoyOngoing training and professional development to support your career growth.Regular team-building activities and social events that foster connection and collaboration.A personal wellbeing / birthday leave day.A flexible hybrid work model, balancing working from home with 2 days in-office per week.
#J-*****-Ljbffr

📌 Risk And Compliance Lead (Sydney)
🏢 Medirecords
📍 Sydney