Senior Risk Manager

• →Advise the business on risk. Be the trusted subject-matter expert: identify risks early, advise on risk-in-change as products and processes develop, and help teams treat risk as an enabler, not a blocker.
• →Own incidents and breaches end-to-end. Run incident management so issues are recorded, investigated and resolved in line with policy and obligations, drive root-cause analysis and remediation, and support breach management with Compliance and Legal.
• →Lead controls assurance. Test how effective key controls are, enable first-line testing, run independent second-line reviews, and report findings, escalating material weaknesses where they matter.
• →Keep the risk picture current. Maintain risk, incident and Risk-in-Change registers in Brighte’s GRC tooling (e.g. Drova), support the Risk Appetite Statement, and report to the Leadership Team, Risk & Compliance Committee and Board.
• →Lift risk maturity. Improve the framework, tools and templates, and design and deliver risk training so the business gets more right on its own.
• →Work AI-first. AI runs through the whole risk lifecycle here, and we expect you to push it further. Use agentic AI to identify, assess and monitor risk and controls and to generate real-time, decision-quality insight. You validate and assure every output for accuracy, completeness, bias and confidentiality before anyone relies on it; you advise on the thresholds, escalation triggers and human-in-the-loop checkpoints that the business sets and owns,and monitor whether they’re met; and you understand the tooling well enough to know its failure modes and limits. AI does the heavy lifting. You stay accountable for the judgement.

• You’ve spent around 6+ years in risk management within regulated financial services, consumer credit or fintech.
• You’ve worked second-line risk in a regulated lender, hands-on across incident management, controls assurance and operational risk, with strong documentation discipline.
• You can translate risk frameworks into practical controls, testing and evidence, not just describe them.
• You know the NCCP Act, Corporations Act, ASIC AFSL/ACL obligations and conduct risk, and how risk oversight intersects with AML/CTF and Privacy.
• You’ve used AI and agentic tools to automate or uplift real risk work, and you’re fluent with GRC tooling (e.g. Drova or equivalent).
• You use AI with discipline: fast, but you validate what it gives you before relying on it.
• You bring a relevant degree/qualification; professional risk or compliance certifications (e.g. ICA, CCRP, CAMS) are highly regarded.

We use AI every day at Brighte, and we hire people who do too. Every role includes a short assessment that shows us how you put AI to work, use whatever tool you're most comfortable with, there's no trick to it.

Background and reference checks (police, AML, bankruptcy) come towards the end. We use AI in parts of our recruitment process, but final decisions are made by humans.

A front-row seat to Australia's energy transition. Brighte finances and electrifies homes at scale — solar, batteries, hot water, heating — and our enterprise partners are central to this.

On top of that:

• Hybrid working. 3 days in office, 2 from home.
• We love our Socials - lunches, drinks, snacks, table tennis, a properly stocked pantry, and the company of people you actually like.
• Employee Share Option Plan (ESOP). Share in Brighte's success.
• End-of-trip facilities for cyclists, including showers and towel service.
• Anniversary leave. An extra day off each year to mark your time with us.