Senior Risk Manager

Brighte

Senior Risk Manager at Brighte advising on risk management in consumer energy resources. Leading incident management and controls assurance in a hybrid work environment.

Posted 6/22/2026full-timeSydney • 🇦🇺 AustraliaSeniorWebsite

About the role

Key responsibilities & impact

Advise the business on risk. Be the trusted subject-matter expert: identify risks early, advise on risk-in-change as products and processes develop, and help teams treat risk as an enabler, not a blocker.
Own incidents and breaches end-to-end. Run incident management so issues are recorded, investigated and resolved in line with policy and obligations, drive root-cause analysis and remediation, and support breach management with Compliance and Legal.
Lead controls assurance. Test how effective key controls are, enable first-line testing, run independent second-line reviews, and report findings, escalating material weaknesses where they matter.
Keep the risk picture current. Maintain risk, incident and Risk-in-Change registers in Brighte’s GRC tooling (e.g. Drova), support the Risk Appetite Statement, and report to the Leadership Team, Risk & Compliance Committee and Board.
Lift risk maturity. Improve the framework, tools and templates, and design and deliver risk training so the business gets more right on its own.
Work AI-first. AI runs through the whole risk lifecycle here, and we expect you to push it further. Use agentic AI to identify, assess and monitor risk and controls and to generate real-time, decision-quality insight. You validate and assure every output for accuracy, completeness, bias and confidentiality before anyone relies on it; you advise on the thresholds, escalation triggers and human-in-the-loop checkpoints that the business sets and owns, and monitor whether they’re met; and you understand the tooling well enough to know its failure modes and limits. AI does the heavy lifting. You stay accountable for the judgement.

Requirements

What you’ll need

You’ve spent around 6+ years in risk management within regulated financial services, consumer credit or fintech.
You’ve worked second-line risk in a regulated lender, hands-on across incident management, controls assurance and operational risk, with strong documentation discipline.
You can translate risk frameworks into practical controls, testing and evidence, not just describe them.
You know the NCCP Act, Corporations Act, ASIC AFSL/ACL obligations and conduct risk, and how risk oversight intersects with AML/CTF and Privacy.
You’ve used AI and agentic tools to automate or uplift real risk work, and you’re fluent with GRC tooling (e.g. Drova or equivalent).
You use AI with discipline: fast, but you validate what it gives you before relying on it.
You bring a relevant degree/qualification; professional risk or compliance certifications (e.g. ICA, CCRP, CAMS) are highly regarded.

Benefits

Comp & perks

Hybrid working. 3 days in office, 2 from home.
We love our Socials - lunches, drinks, snacks, table tennis, a properly stocked pantry, and the company of people you actually like.
Employee Share Option Plan (ESOP). Share in Brighte's success.
End-of-trip facilities for cyclists, including showers and towel service.
Anniversary leave. An extra day off each year to mark your time with us.

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

risk managementincident managementcontrols assuranceoperational riskroot-cause analysisrisk frameworkstesting and evidenceAI toolsGRC toolingdocumentation discipline

Soft Skills

advisory skillscommunicationleadershipproblem-solvinganalytical thinkingtraining and developmentstakeholder managementaccountabilityattention to detailcollaboration

Certifications

ICACCRPCAMSrelevant degreeprofessional risk certification