About Us
At Downer we plan, create and sustain. Downer is the leading provider of integrated services in Australia and New Zealand. Through trusted relationships and world leading insight we work closely with our customers to design, build and sustain assets, infrastructure, and facilities.
Job Description
We are seeking a talented IT Risk & Compliance Analyst to join our team. This role is pivotal in managing IT-related risks and ensuring our business adheres to regulatory requirements and other relevant compliance across Australia and New Zealand. This role can be based in Sydney, Melbourne, Brisbane or Auckland with hybrid working options available.
About The Role:
Technology Risk & Compliance Analysis is critical in managing and driving operational risk and controls to uplift the maturity of Downer’s technology risk management function. You will partner with operational teams to:
- Identify, communicate, measure, assess and oversight technology risks.
- Support risk processes and registers, maintaining a high level of accuracy and currency of content.
- Continuously monitor the status of risk treatment actions, related to risks and findings.
- Provide input and maintain our risk management framework.
- Support and facilitate audit and compliance activities as it relates to ISMS standards, internal and external audits in collaboration with internal and external auditors; and provide support and assistance in responding to audit findings and recommendations.
- Monitor regulatory requirements, industry standards, and best practices related to IT risk management and assurance, and ensure compliance with applicable laws, regulations, and guidelines.
About You:
- Bachelor's degree in information technology, computer science, business administration, or a related field.
- Certifications in Audit (CISA), Risk Management and Project Management highly desirable.
- 3+ years in enterprise technology risk management and compliance role.
- Prior experience in a compliance and/or regulatory environments and the adoption of ISO/IEC standards.
- Experience/ understanding of risk and security frameworks (e.g. ISO 27001, NIST).
- Experience with risk assessment tools and technologies, and proficiency in data analysis and reporting.
- Experience in Compliance management tool highly desirable.
- Knowledge of risk management and compliance disciplines and experience in applying them in risk assessment and assurance activities.
- Good understanding of the risk categories: operational risk, IT risk, project risk, third party risk, business risk.
- Strong analytical and problem-solving skills with the ability to analyse complex IT systems and processes, identify risks and vulnerabilities, and recommend effective risk mitigation strategies.
- Knowledge of regulatory requirements and compliance standards.
Benefits of Working with Downer:
- Work with an ASX listed company, working with market leaders.
- Grow your career with us, we are passionate about giving our people opportunities to grow through personal and professional development and continuous learning:
-Professional development programs
-Access to professional memberships and industry networks
- Be part of a team that cares, we foster a work environment built on support that is flexible around our employee’s wellbeing needs:
-Flexible work arrangements
-Parental leave
-Employee Assistance Program
-Programs promoting diversity and inclusion
- A range of Corporate Benefits, including:
-Discounted services (car hires, hotels, insurance, retail stores, gyms)
-Salary sacrifice superannuation
At Downer, our approach to diversity is what sets us apart. Our people can be their best by bringing their most authentic selves to work every day. Downer is made up of more than 30,000 people who are all different. Different preferences and perspectives. Different histories and heritages. We are different in the way we think, the actions we take and the unique value we contribute to Downer and it’s these differences that are Downer’s greatest strength. As an inclusive employer, we welcome applications from everyone – bring your difference.
