Compliance Sme Lead

**Sydney**
- Permanent contract with a 35hour working week
- 17.5% annual leave loading and flex leave
- Hybrid working environment, salary of $145,378.00

**About the Role**

The role will provide support to the Head of Compliance to help ensure icare meets its legal, regulatory and internal policy obligations through the implementation of the Compliance Management Policy and other enterprise risk and compliance frameworks and policies including the Privacy and Data Breach Policy.

Be actively involved in partnering with the business to document first line controls and support the monitoring and oversight plan at the second line and undertake reviews, generate reports and draw insights on the effectiveness of the framework and system.

**Benefits**
- A corporate wellbeing program with subsidised gym membership, free flu vaccinations and health check programs
- 17.5% annual leave loading
- Comprehensive learning and development support aligned to icare’s Core Capabilities.
- Our People Awards - On-the-spot Recognition, Quarterly Values Awards & Our People Annual Awards
- Access to our Employee Assistance Program

**Duties**

**It’s an exciting time at icare where no two days are the same the Compliance SME Lead you will**:

- Provide quality SME oversight over the risk and control environment, focusing on the provision of constructive advice and challenge across icare service lines. (Critical activities include compliance assessments, privacy incident management, development and reporting of appropriate metrics, root cause and trend analysis and review of supporting data etc)
- Be a contact for Risk Partners and/or Line 1 Risk to engage with on any compliance matter, not just for the SME area, but rather being part of a pool of compliance SMEs, cross-skilled in SME domains including workers compensation, general insurance and care and finance.
- Partner with icare Incident Management as key SME advisor and coordinator (as required) for all compliance/privacy issues and/or incidents including undertaking serious harm assessments under the MNDB scheme.
- Assess and advise on privacy risks in projects and change activities particularly those involving transformation across the icare schemes, process change, platform integration and artificial intelligence and provide practical risk-based recommendations to support responsible innovation.
- Provide advice and guidance on eligible data breaches, regulatory notifications and engagement with the Information and Privacy Commissioner.
- Develop and enhance privacy frameworks, policies and standards and identify strategies to avoid privacy incidents including advising on system and process controls.
- Act as an information source to the business to identify applicable laws, regulations, and external requirements and anticipate regulatory change.
- Undertake an annual review of Obligations & Controls Register (OCR) to ensure coverage of all key regulatory requirements for SME area.
- Review the ineffective and partially effective compliance controls for SME area and identify potential areas of exposure that require compliance assessment and remediation/action.
- Provide assurance support as SME to the assurance team, including where required completing assurance activities.

**Skills & Experience**
- Deep compliance expertise in privacy and/or technology with a bachelor’s degree in law, business or equivalent (desired).
- Ability to assess and evaluate policies and procedures to support the achievement of the identified compliance objectives and recommend improvements to business operations where necessary ensuring our frameworks and guidance outline key processes. Ability to assist with a compliance risk assessment of each of the icare obligations to determine the highest to lowest rated compliance risks.
- Ability to implement a second line monitoring and evaluation plan.
- Conduct second line monitoring and prepare reports of the results for the Group Executive Team Tand the Board Risk Committee.
- Ability to assist with the conduct of investigations into and assessments of reportable breaches and incidents and provide advice to the business on improvement opportunities.
- Ability to assist with the development and implementation of a company-wide self-assessment and assurance system.
- Ability to assist with delivering enterprise compliance and privacy training.
- Develop relationships with management, staff and risk coordinators to influence and foster a compliance and privacy aware culture.

**Culture**

We know our strength comes from the diversity of our people and would encourage people with different experiences and backgrounds to apply. We are committed to our people’s development so the people of NSW can thrive.

**About the Company**

We care for the people of NSW, building confidence and trust so our communities can thrive. We make the complex simple, so our schemes deliver better outcomes for people and communities. Whether a person is severely injured