About the Role

Sydney Water is seeking an experienced Digital Risk & Compliance Specialist to strengthen risk management, governance, assurance, and compliance across our Digital Group. Working closely with Digital leaders, Risk & Compliance, Internal Audit, Legal, and Executive stakeholders, you will provide expert advice, manage risk and compliance frameworks, support governance initiatives, and ensure adherence to Digital regulatory, Operating Licence, and organisational requirements. This is an exciting opportunity to influence enterprise-wide digital risk & compliance practices, enhance operational resilience, and support Sydney Water's ongoing digital transformation journey.

Key Responsibilities

As the Digital Risk & Compliance Specialist, you will:

• Lead the ongoing development, implementation, maintenance, and continuous improvement of Digital Risk and Compliance Management Frameworks.
• Partner with Digital Group leaders to identify, assess, manage, and report on adherence to compliance obligations.
• Prepare risk, compliance, and assurance reports for senior leadership and Board Risk Committees.
• Contribute specialist risk and compliance input into regulatory and IPART submissions where required.
• Lead Digital risk assessments and provide assurance over the effectiveness of risk controls.
• Monitor and report on compliance performance, and emerging threats across the Digital Group.
• Partner with Internal Audit, Legal, Project Governance, Protective Security and Risk & Compliance teams to strengthen Sydney Water's control framework.
• Support second-line risk and compliance management activities through governance, reporting, data analysis, and assurance.
• Facilitate risk and compliance workshops and engage stakeholders to drive strong governance and risk mitigation outcomes.
• Develop and maintain Digital policies, principles, standards, frameworks, procedures, and awareness programs.
• Contribute to the development and maintenance of Digital Group Business Continuity Plans.
• Support organisational resilience activities, including risk, incident, crisis, and continuity management.
• Analyse risk and compliance data to identify trends, provide insights, and recommend improvement opportunities.

About You

To be successful in this role, you will bring:

• Demonstrated experience in Digital risk management, compliance and governance within a complex organisational environment.
• Experience developing and implementing Digital risk management frameworks, controls, and compliance programs.
• Strong understanding of and experience in implementing cyber security policies, guidelines applicable to IT/OT environments and critical infrastructure providers.
• Experience conducting risk assessments, control reviews, compliance monitoring, and reporting activities.
• Knowledge of regulatory compliance obligations, business continuity, incident management, and organisational resilience practices.
• Strong stakeholder engagement and facilitation skills with the ability to influence and build trusted relationships across all levels of an organisation.
• Advanced analytical, problem-solving, and reporting capabilities.
• Excellent written and verbal communication skills, including the ability to prepare executive-level reports and recommendations.
• Experience working with technology, digital, cyber, software asset management, or IT governance environments.

Desirable Qualifications

Degree qualification in Risk Management, Business, Information Technology, Commerce, Governance, Audit, Law, or a related discipline.

Professional certifications such as:

• Certified Risk Management Professional (CRMP)
• Certified Information Systems Auditor (CISA)
• Certified Internal Auditor (CIA)
• CGRC, CRISC or equivalent risk and governance certifications
• Experience working within regulated, critical infrastructure, utility, or government environments