Principal Continuous Assurance

Work Location:  Perth, Western Australia.  Fortescue's Perth office is located on the traditional lands of the Whadjuk people.

Roster:  Monday to Friday.

Lead and own Fortescue's Continuous Assurance (CA) program end-to-end — delivering near real-time visibility of critical control health for material risks by automating Critical Control Verifications (CCVs), setting clear deficiency thresholds (TARPs), and integrating insights into decision-making across the business.

Program ownership & strategy

• Set the CA vision, roadmap, and targets; prioritise material risks (highest MPC) and sequence deployments.
• Embed CA within the Fortescue Risk Management Framework (FRMF) and performance standards for critical controls.

Delivery leadership

• Orchestrate data engineering in Snowflake, building SQL tests that autonomously verify CCVs and feed Power BI dashboards.
• Drive stakeholder UAT and iterate until risk/control owners approve dashboards and thresholds.
• Own the CA mobile/web application rollout (notifications, acknowledgements, escalation timing) and link to dashboards.

Stakeholder & change management

• Partner with Risk Owners, Control Owners, technical SMEs, Integrated Technology and Central Services to complete prerequisites (bowties, performance standards, ownership), align algorithms, and agree TARPs.
• Lead change management and training to embed CA processes into BAU operations, including acknowledgement and actioning of deficiencies.

Assurance, compliance & sustainability

• Implement documentation and records management consistent with review schedules and governance requirements.

People, vendors & budget

• Build and lead a cross-functional delivery squad (risk/assurance, data engineering, BI, product, integration) and manage vendors as required.
• Own CA program budget, forecasting and benefits realisation.

• Leadership: 10+ years across engineering, risk, assurance, analytics or operational technology
• Risk & controls: Deep knowledge of material risk management, critical controls, CCVs vs CETs, and TARPs/escalation.
• Data & platforms: Hands-on familiarity leading teams working with Snowflake/SQL, data modelling, lineage and quality controls; strong product sense with Power BI dashboards.
• Enterprise systems: Understanding of upstream sources used for CA (e.g., SAP PM, BMS, CGR Foundation, SCADA/PIMS, SuccessFactors, GIS/track systems), and how to translate performance standards into testable algorithms.
• Delivery excellence: Agile delivery, UAT, release/change management, and stakeholder facilitation from site SMEs to executives.
• Communication: Ability to convert technical results into concise risk narratives and executive reporting that drive action.
• HSE mindset: Experience operating in safety-critical, heavy industry contexts with a strong assurance/compliance orientation.
• Qualification:  Degree in Engineering, Data/Computer Science, Risk/Assurance or similar
• Certifications (e.g., PgMP/PMP/Prince2/Agile; CRMP/IRM/CERA) and experience with mobile/app product ownership.

Be part of something big. Fortescue is leading the world with our plan to decarbonise our iron ore operations, projects that harness renewable energy and the development of technology that will change our planet forever.

Fortescue celebrates individual strengths and team members are encouraged to bring their whole selves to work. Our global workforce drives and promotes an inclusive culture, both within our organisation and throughout the communities we interact with. Diverse backgrounds include First Nations Peoples, people with disabilities, LGBTQ+ community, gender, neurodiverse, cultural diversity, all age groups, and those with an intersectional or multiple diverse characteristics. We encourage candidates from all backgrounds to apply.

Internal Candidates / Current Contractors please apply via Success Factors Careers Portal. For further information on how to apply please visit the Fortescue Hub. 

Fortescue reserves the right to close applications early should a suitable pool of candidates be identified. Fortescue will never contact you to ask for payment of any kind, whether directly or through a third party.