Group Risk and Compliance Manager

The Risk and Compliance Business Partner is responsible for supporting operational teams across Australia and New Zealand to effectively manage risk, meet compliance obligations, and continuously improve control frameworks. Based in Campbellfield, this role is the Second in Command (2IC) to the Chief Risk and Compliance Officer as well as working closely with site leaders and frontline teams to identify and manage operational, strategic, and regulatory risks, maintain risk registers, support audits and investigations, and ensure compliance with key standards such as ISO 9001/14001/45001/27001, AS/NZS 5377, EPA, and WHS requirements. As the 2IC to the Chief Risk & Compliance Officer you will be an operational leader responsible for translating strategy into action: implementing and embedding risk, compliance and management system controls across the Group’s sites; managing audits and assurance; improving maturity of risk registers and controls; and providing leadership when the C-suite is unavailable. Role Responsibilities Act as 2IC: deputise for the Chief Risk & Compliance Officer when required and lead specific Group initiatives. Implement and embed the Group Risk & Compliance Framework across sites — ensure consistent terminology, risk scoring, controls taxonomy, and reporting. Lead ISO implementation and continuous improvement activities (9001/14001/45001) and support certifications (R2 / AS 5377) across sites. Design, run and report internal compliance audits, control effectiveness reviews and site readiness assessments. Coach and mentor site managers and compliance partners in risk management, incident investigation, and corrective actions. Support the CRCO’s regulatory engagement: prepare responses and coordinate evidence packs. Build and maintain governance artefacts: risk registers, compliance calendars, audit schedules and management reports for Exec and Board. Drive embedding activities: training programs, playbooks, SOPs, assurance checklists, and embedding culture of risk ownership. Support major projects (new plant, process changes, licence variations) from a risk/compliance lens, including impact assessments and controls. Oversee incident response support — lead investigations, root cause analysis and remediation tracking. Maintain and improve contractor / supplier assurance processes relevant to compliance. Travel regularly to sites to lead implementation, auditing, mentoring and regulatory interactions. Support and develop the broader Risk and Compliance team including teaching best practice and provide constructive feedback with the aim to uplift skills and capability. Skills & Experience - Essential 7+ years’ experience in risk, compliance, EHS or similar roles with at least 3 years in a lead capacity. Proven track record implementing and embedding risk and compliance frameworks in production, manufacturing, recycling, or heavy industry environments. Strong working knowledge and practical experience with ISO management systems (ISO 9001, 14001, 45001) and experience supporting certification processes (internal audits; external audits). Experience with R2, AS 5377 (or similar) is highly desirable. Demonstrated ability to translate policy into site-level procedures, SOPs and training; hands‑on implementation. Strong stakeholder management and coaching skills — able to influence operational leaders and site teams. Proven experience managing audits, regulatory inspections and preparing evidence packs. Excellent written and verbal communication — can produce regulator‑grade documents and convey pragmatic controls to operators. Ability and willingness to travel regularly (day travel and multi‑day travel across Australia and New Zealand). Background in recycling, metals processing, waste management, mining or manufacturing. Formal qualifications in risk, compliance, engineering, environmental science or occupational hygiene. Auditor / lead auditor certifications (ISO 9001/14001/45001) or professional certifications in risk (e.g., IRM, AS/NZS ISO 31000 facilitator) or compliance. SAP/ERP or GRC (Governance, Risk & Compliance) tool experience, or Risk Register tools (e.g. Resolver, Cura, Enablon). #J-18808-Ljbffr