Governance Risk & Compliance Manager

We Are Fujitsu

We use technology to make happier lives. We are a global leader in technology and business solutions that transform organizations and the world around us. We have a long heritage of bringing innovation and expertise, continuously working to contribute to the growth of society and our customers.

About the role

The GRC Manager in the Office of AI, is responsible for establishing and continuously enhancing governance frameworks across the end-to-end AI lifecycle. The role ensures the ethical, secure, and compliant adoption of AI by embedding risk, ethics, and compliance controls into internal delivery practices.

Accountable for achieving and sustaining ISO/IEC 42001 (AI Management System) accreditation, the GRC Manager oversees AI-related risk identification and management, ensuring alignment with regulatory requirements and organisational standards. Acting as a trusted advisor, the role partners closely with Program Managers, Solution Architects, and business stakeholders to enable scalable AI adoption while maintaining robust governance, transparency, and accountability. This role offers a hybrid working environment.

Location: Sydney or Melbourne (preferred); flexible across other cities in Australia.

Key Responsibilities

AI Governance & Risk

• Define and maintain AI governance frameworks, policies, and standards
• Identify and manage AI risks across internal use cases (ethical, regulatory, data, operational)
• Ensure AI initiatives align with enterprise risk and compliance requirements
• Provide practical guidance to embed controls into SDLC/MLOps workflows

Responsible AI & Ethics

• Embed Responsible AI principles including fairness, transparency, accountability, and explainability
• Assess and mitigate risks such as bias, misuse, and unintended consequences
• Integrate ethical review, privacy-by-design, and security-by-design into AI intake and approvals
• Advise on appropriate use of AI, including GenAI and automation

ISO/IEC 42001 & Compliance

• Lead ISO/IEC 42001 readiness, accreditation, and ongoing compliance
• Develop and maintain AIMS documentation, risk controls, and audit evidence
• Conduct gap assessments and coordinate remediation actions with stakeholders

Controls, Assurance & Reporting

• Review and strengthen AI controls, safeguards, and governance processes
• Monitor compliance, manage assurance activities, and support audits
• Report on AI risk posture, compliance status, KPIs, and emerging trends

Stakeholder Engagement & Capability Building

• Act as a trusted advisor to business, delivery, risk, and legal teams
• Enable teams to navigate governance requirements while supporting innovation
• Develop and deliver training on AI governance and Responsible AI practices

About you:

Essential:

• Proven experience (5-8 years) in risk management, governance, or compliance roles
• Experience working in enterprise or regulated environments
• Experience designing and operationalising management systems aligned to ISO standards including audit preparation and evidence management.
• Familiarity with ISO/IEC 42001 (AIMS) and/or other ISO management systems (e.g., ISO 27001)
• Demonstrated experience in governance, risk, and compliance roles, ideally involving technology risk, data, or AI/analytics delivery.
• Excellent stakeholder management; ability to influence across technical and non-technical teams.
• Strong understanding of risk frameworks, controls, and compliance processes
• Strong documentation skills and attention to detail; capable of building audit-ready artifacts.
• Practical experience implementing controls without slowing delivery risk based and outcome-focused.
• Excellent written and verbal communication skills

Desired Experience & Knowledge / Other Relevant Information

• Exposure to AI, data, or technology risk and governance
• Strong understanding of AI lifecycle concepts and associated risks (data, model, deployment, monitoring).
• Understanding of AI ethics, responsible AI, or emerging AI regulations
• Experience supporting governance in transformation or technology programs
• Familiarity with data privacy, security, and regulatory frameworks
• Experience developing governance frameworks or policies
• Background in internal audit, assurance, or control testing.

Qualifications

• Degree in Risk/Compliance, Law, Information Security, IT, Data/Analytics, or equivalent experience.
• Relevant certifications (any of the following) desired not mandatory:
• Risk/Compliance: CRISC, CISA, CGEIT, ISO Lead Implementer/Lead Auditor
• Security/Privacy: CISSP, CIPP/E, CIPP/A (or local equivalent)

Why Fujitsu?

We are an organization with a strong set of values and a history of respecting fairness and equality, whilst promoting diversity, equity, and inclusion. We constantly push ourselves to do better and strive to bring together a diverse mix of perspectives and talents in an inclusive environment, where we encourage our people to bring their full selves to work. We call this Be Completely You.

• We put people first. We believe in the power of diversity to drive innovation and our AWEI (Australian Workplace Equality Index) Gold Employer status, and Rainbow Tick certification for LGBTI+ inclusion show that we value an inclusive culture.
• We offer tailored career paths across our global organization to support your professional and personal growth.
• Our customers trust us. We have an excellent reputation across the region and globally.
• Best in-class reward and recognition programs flexible work, volunteering leave, and more.
• We live our values of aspiration, trust, and empathy, all day, every day.

Commitment to Diversity, Equity and Inclusion

As an inclusive employer, Fujitsu aims to recruit a diverse range of talents to help us achieve our purpose. In line with our diversity, equity, and inclusion strategy, we highly welcome applications from women and gender-diverse people; Aboriginal and Torres Strait Islander people; Māori and Pacific people; LGBTI+ people; people with a disability; culturally and linguistically diverse people; veterans, Australian Defence Force (ADF) and emergency responders. Transgender and gender-diverse applicants can request a copy of our Frequently Asked Questions to assist with the recruitment journey.

If you don't tick every box in this job description, please don't rule yourself out. Research suggests that underrepresented groups tend to only apply if they meet every requirement. We focus on hiring people who value inclusion, collaboration, adaptability, courage, and integrity, rather than ticking boxes so if this resonates with you, then please apply. For more information, please email [email protected].

Search Firm Representatives - PLEASE READ:

Fujitsu does not accept unsolicited assistance from search firms for employment opportunities. All CVs or resumes submitted by search firms to any employee at our company without a valid written agreement in place for this position will be considered the sole property of our company. No fee will be paid if a candidate is hired by Fujitsu due to an agency referral where no existing agreement is in place with the Fujitsu Talent Acquisition Team. Where agency agreements are in place, introductions must be through engagement by the Fujitsu Talent Acquisition Team.