Senior Risk Analyst, Controls Testing (12mth Contract)

Plan and complete testing across PEXA’s technology and business process controls, checking that each control is well designed and working as intended.

Working closely with control owners, you’ll build an understanding of their processes, gather and assess evidence, document findings and highlight any gaps or weaknesses. Where improvements are needed, you’ll agree practical actions with stakeholders and track them through to completion.

The role also supports internal and external assurance activities, including SOC 2, by maintaining accurate records and responding to evidence requests. Alongside these core responsibilities, there will be opportunities to contribute to controls transformation by simplifying or automating testing, improving evidence collection and exploring emerging solutions such as AI agents.

The Senior Risk Analyst – Controls Testing will help PEXA meet its risk, regulatory and assurance obligations by providing confidence that our key controls are effective.

This is a hands-on role combining detailed controls testing, stakeholder engagement, analysis and continuous improvement across both Technology and the broader business.

You’ll bring capability in:

• Testing technology and business process controls
• Assessing control design and operating effectiveness
• Collecting, evaluating and documenting evidence 
• Identifying control gaps and supporting remediation
• Analysing testing outcomes and communicating practical insights

What success looks like (6–12 months):                     

• Delivering the annual controls testing plan accurately and on time
• Maintaining clear, consistent and audit-ready testing records
• Providing reliable evidence for SOC 2 and other assurance requirements
• Identifying control weaknesses and supporting owners to address them
• Highlighting trends, repeat issues and emerging risk themes
• Contributing to improvements in testing methods, automation and evidence collection