Lead information security governance and compliance across one of Australia's largest employment services providers.
At APM, we empower people of all abilities to participate in the workforce and community. As our RFFR Program Manager, you will play a critical role in protecting our information assets, strengthening compliance frameworks, and driving a culture of risk awareness and continuous improvement across the organisation.
This is an exciting opportunity for an experienced governance, risk, compliance or information security professional to lead the management of our Right Fit For Risk (RFFR) Program and support ongoing ISO/IEC 27001 compliance and certification activities.
This role can be based at any APM office Nationally.
What you'll be doing
Reporting into the Information Security team, you will oversee the governance and administration of APM's information security compliance framework, ensuring the confidentiality, integrity and availability of information assets.
Your responsibilities will include:
Information Security & Compliance
- Lead and coordinate activities supporting RFFR and ISO/IEC 27001 compliance.
- Maintain and continuously improve the RFFR framework to address emerging risks and changing regulatory requirements.
- Monitor compliance obligations and support implementation of required changes.
- Coordinate annual management reviews and prepare performance reporting across risk, controls, audit outcomes and system effectiveness.
- Manage quarterly ISM updates and ensure compliance documentation remains current.
Audit & Assurance
- Develop, maintain and refresh the rolling three-year internal audit plan.
- Coordinate internal and external audits from planning through to completion.
- Review and approve audit scopes, findings and recommendations.
- Manage audit schedules and annual compliance activities.
- Support site readiness and preparation for audit activities.
- Drive corrective action programs and monitor remediation progress.
Risk Management & Governance
- Oversee control management within compliance systems, ensuring records remain accurate and up to date.
- Support enterprise risk management, compliance monitoring and remediation activities.
- Ensure policies, procedures and compliance management plans are reviewed and updated regularly.
- Identify, assess and escalate significant risks and control weaknesses.
Stakeholder Engagement
- Coordinate and facilitate governance forums including the RFFR Steering Committee, Working Group and System Owners Forum.
- Provide regular reporting on audit outcomes, control effectiveness, risk themes and compliance performance.
- Partner with leaders across the business to strengthen accountability and understanding of compliance requirements.
- Support the development and delivery of security awareness initiatives.
What you'll bring
Essential
- Experience managing governance, risk, compliance, audit or information security programs.
- Strong project management, organisational and coordination skills.
- Excellent communication and stakeholder engagement capabilities.
- Demonstrated ability to influence and engage stakeholders at all levels.
- Understanding of risk management and compliance frameworks.
- Strategic thinking with a continuous improvement mindset.
- Ability to meet legislative requirements to work within Employment Services programs.
- Ability to obtain and maintain a National Police Check.
Desirable
- Experience within Employment Services or a highly regulated environment.
- Exposure to Information Security Management Systems (ISMS).
- Knowledge of ISO/IEC 27001, information security principles and privacy requirements.
- Experience in governance, policy development, compliance monitoring and assurance programs.
Why join APM?
At APM, you'll be part of a global organisation that puts people at the centre of everything we do. You'll have the opportunity to influence enterprise-wide security and compliance outcomes while working alongside passionate professionals committed to making a positive social impact.
We offer:
- A supportive and collaborative culture
- Opportunities for career growth and professional development
- Access to employee wellbeing initiatives
- The chance to contribute to meaningful outcomes for individuals and communities across Australia
Ready to make an impact? Apply now and help strengthen the governance, compliance and security frameworks that support APM's purpose and growth.
