Senior Risk

Senior Risk & Compliance Specialist (Tyro Health) Join to apply for the Senior Risk & Compliance Specialist (Tyro Health) role at Tyro Payments About Tyro At Tyro, we’re into business big time. Through our integrated payments, banking and lending solutions, we’re here to ensure nothing stands in the way of Australian business success. With over 21 years' experience, we combine the best people, technology, and partners to deliver simplified payments and seamless business banking. We power more than 73,000 merchants across Australia and work with more than 700 partners to create seamless experiences for hospitality, retail, services and health providers. About Tyro Health Our mission is to make healthcare more accessible for all Australians through the technology and solutions we build. We partner with providers, software vendors, insurers, and health system leaders to help build a future that is more connected, efficient, and patient-focused. About the Role We are seeking a proactive and versatile Senior Risk & Compliance Specialist to strengthen Tyro Health’s risk and compliance capabilities while supporting our engineering and operations teams. This role will drive the implementation and maintenance of risk frameworks, compliance programs, and security practices. You will build and maintain trust with patients, providers, and partners, ensuring our solutions are built on security, compliance, and operational resilience. The role is cross-functional and requires strong problem-solving skills and the ability to work with internal teams and external stakeholders. What You’ll Do Governance & Framework Management Champion risk management across Tyro Health, driving the identification, assessment, and mitigation of key business risks. Embed a strong risk culture by setting clear expectations, coaching team members, and delivering risk education initiatives. Maintain and continuously improve Tyro Health’s ISO 27001-certified Information Security Management System (ISMS), including internal audits and policy adherence. Regulatory & Scheme Compliance Implement and evidence controls to meet APRA prudential standards (e.g. CPS 230, CPS 234) and support regulatory reporting and attestations. Partner with Group Product and Group Risk to ensure compliance with payment scheme and regulatory requirements, including PCI DSS and KYC obligations. Strengthen fraud risk management by collaborating on frameworks, control testing, and incident follow-up. Operational Resilience & Security Lead Business Continuity and Disaster Recovery planning, testing, and reporting to ensure operational resilience. Partner with Site Reliability and engineering teams to enhance security operations, monitoring, and response processes. Support incident and risk management processes, ensuring effective escalation, documentation, and resolution. Partner & Third-Party Management Act as a trusted advisor to integration partners, guiding them through compliance and regulatory requirements. Manage third-party risk assurance, including completing security assessments, questionnaires, and PCI attestations. Collaborate with external and internal stakeholders to enable compliant and secure partner integrations. What You’ll Bring At least 5 years of hands-on experience in a risk, compliance, or security GRC role. Deep, practical experience implementing or managing major compliance frameworks (e.g., ISO 27001, SOC 2). Ability to translate complex regulatory requirements into practical, actionable guidance for technical and non-technical teams. Exceptional documentation and communication skills for auditors and engineers. A pragmatic and collaborative mindset, with a focus on enabling the business to achieve its goals safely. Great-to-Haves Direct experience with APRA prudential standards (CPS 230, CPS 234) and/or PCI DSS. Experience in a high-growth tech, fintech, or health-tech environment. Familiarity with fraud risk management in a payments context. Experience working in a matrixed environment with a central risk or compliance function. What’s in It for You? Tyro is committed to a diverse, inclusive workplace. The following are some benefits teams value: A mix of in-office and remote working Learning and career development opportunities 16 weeks paid primary carers leave 12 weeks paid secondary carers leave Annual team-based volunteer day Birthday Leave Power Up Day (additional day of leave) Weekly team social events, snacks, craft beer and wine, ping pong and video games Taco Tuesdays Mental health and wellness initiatives Novated leasing Tyro is an equal opportunity employer. If you need accommodations or adjustments at any stage of the recruitment process, inform our Talent team during your conversation with them. Still with us? If you’ve got this far, you might be a great fit. If you don’t tick all the boxes, apply anyway and our Talent team will review your profile for future roles. #J-18808-Ljbffr