MediRecords is transforming the future of healthcare technology. Our cutting-edge, cloud-based solutions equip healthcare providers with modern, intelligent tools that streamline workflows and elevate patient care. Trusted by doctors, multidisciplinary clinics, hospitals, and government departments across Australia, we are a fast-growing organisation that values collaboration, integrity, and innovation.
About the role
We are seeking a
Risk and Compliance Lead
to join MediRecords, responsible for developing, implementing, and overseeing risk and compliance frameworks aligned with business strategy, regulatory requirements, and internal standards locally and globally, including in relation to Artificial Intelligence and emerging technologies.
This role will lead risk assessments, manage investigations into potential breaches, and promote a strong culture of compliance across the organisation. It requires strong analytical skills, attention to detail, and the ability to communicate complex requirements clearly to a range of stakeholders.
You will work cross-functionally with teams across Engineering, DevOps, Product, Finance, People & Culture, Operations, Customer-facing teams, Support, and external vendors.
Role Responsibilities
Monitor and interpret regulatory requirements across risk, compliance, privacy, security, and emerging technologies (including AI)
Conduct risk assessments, internal audits, and compliance reviews to identify and mitigate risks
Lead investigations into incidents and breaches, including root cause analysis and corrective actions
Maintain risk frameworks, registers, and reporting for senior leadership
Oversee privacy management, including data protection impact assessments, breach response,



and personal data requests
Support internal and external audits, certifications, and regulatory inspections
Develop, implement, and maintain policies and procedures across risk, privacy, and security
Ensure ongoing compliance with key standards and frameworks (e.g. ISO, SOC, GDPR, HIPAA)
Support the implementation of systems and tools to manage compliance and certifications
Champion a strong risk and compliance culture through training, education, and guidance
Partner cross-functionally to embed risk, privacy, and security into operations, product development, and processes
Provide guidance on the ethical and compliant use of emerging technologies, including AI
About you
5+ years' experience in risk management or compliance roles, ideally within healthcare or other highly regulated environments
Strong understanding of Australian regulatory frameworks, including the Privacy Act, WHS Act, and My Health Records Act
Relevant professional certifications (e.g. CRMA, GRC certification, CIA, CCEP, ICA) are highly regarded
Experience using GRC platforms and tools such as Vanta, Drata, or similar audit and incident management systems
Solid knowledge of healthcare and security compliance frameworks (e.g. HIPAA, ISO *****, SOC 2)
Excellent communication and collaboration skills, with the ability to engage effectively across both technical and non-technical teams
What You'll Enjoy
Ongoing training and professional development to support your career growth.
Regular team-building activities and social events that foster connection and collaboration.
A personal wellbeing / birthday leave day.
A flexible hybrid work model, balancing working from home with 2 days in-office per week.
#J-*****-Ljbffr

📌 Risk And Compliance Lead (Sydney)
🏢 Medirecords
📍 Sydney