About Brighte Our mission is to make consumer energy resources (CER) affordable and accessible for everyone.Brighte is building the platform to enable and accelerate the energy transition by making it affordable, easy and less risky to buy and sell energy equipment.Our founder and CEO, Katherine McConnell, has been awarded Telstra Businesswoman of the year in 2020 as well as winning the Sustainability Crusader award at B&amp;T's 2023 Women Leading Tech Awards. She is a passionate and humble leader who has a human first approach to business.As a business in 2025, we have been named a AFR Sustainability Leader within the Banking and Finance category and won the inaugural Sustainability Award at the Affies in 2024! What You’ll Do<ul style="margin-top:0cm;margin-bottom:0cm;"><li style="margin-top:0cm;margin-right:0cm;margin-bottom:8pt;line-height:115%;font-size:12pt;font-family:Aptos , sans-serif;">Advise the business on risk. Be the trusted subject-matter expert: identify risks early, advise on risk-in-change as products and processes develop, and help teams treat risk as an enabler, not a blocker.</li><li style="margin-top:0cm;margin-right:0cm;margin-bottom:8pt;line-height:115%;font-size:12pt;font-family:Aptos , sans-serif;">Own incidents and breaches end-to-end. Run incident management so issues are recorded, investigated and resolved in line with policy and obligations, drive root-cause analysis and remediation, and support breach management with Compliance and Legal.</li><li style="margin-top:0cm;margin-right:0cm;margin-bottom:8pt;line-height:115%;font-size:12pt;font-family:Aptos , sans-serif;">Lead controls assurance. Test how effective key controls are, enable first-line testing, run independent second-line reviews, and report findings, escalating material weaknesses where they matter.</li><li style="margin-top:0cm;margin-right:0cm;margin-bottom:8pt;line-height:115%;font-size:12pt;font-family:Aptos , sans-serif;">Keep the risk picture current. Maintain risk, incident and Risk-in-Change registers in Brighte’s GRC tooling (e.g. Drova), support the Risk Appetite Statement, and report to the Leadership Team, Risk &amp; Compliance Committee and Board.</li><li style="margin-top:0cm;margin-right:0cm;margin-bottom:8pt;line-height:115%;font-size:12pt;font-family:Aptos , sans-serif;">Lift risk maturity. Improve the framework, tools and templates, and design and deliver risk training so the business gets more right on its own.</li><li style="margin-top:0cm;margin-right:0cm;margin-bottom:8pt;line-height:115%;font-size:12pt;font-family:Aptos , sans-serif;">Work AI-first. AI runs through the whole risk lifecycle here, and we expect you to push it further. Use agentic AI to identify, assess and monitor risk and controls and to generate real-time, decision-quality insight. You validate and assure every output for accuracy, completeness, bias and confidentiality before anyone relies on it; you advise on the thresholds, escalation triggers and human-in-the-loop checkpoints that the business sets and owns,and monitor whether they’re met; and you understand the tooling well enough to know its failure modes and limits. AI does the heavy lifting. You stay accountable for the judgement.</li></ul> What You’ll Bring<ul style="margin-top:0cm;margin-bottom:0cm;"><li style="margin-top:0cm;margin-right:0cm;margin-bottom:8pt;line-height:115%;font-size:12pt;font-family:Aptos , sans-serif;">You’ve spent around 6+ years in risk management within regulated financial services, consumer credit or fintech.</li><li style="margin-top:0cm;margin-right:0cm;margin-bottom:8pt;line-height:115%;font-size:12pt;font-family:Aptos , sans-serif;">You’ve worked second-line risk in a regulated lender, hands-on across incident management, controls assurance and operational risk, with strong documentation discipline.</li><li style="margin-top:0cm;margin-right:0cm;margin-bottom:8pt;line-height:115%;font-size:12pt;font-family:Aptos , sans-serif;">You can translate risk frameworks into practical controls, testing and evidence, not just describe them.</li><li style="margin-top:0cm;margin-right:0cm;margin-bottom:8pt;line-height:115%;font-size:12pt;font-family:Aptos , sans-serif;">You know the NCCP Act, Corporations Act, ASIC AFSL/ACL obligations and conduct risk, and how risk oversight intersects with AML/CTF and Privacy.</li><li style="margin-top:0cm;margin-right:0cm;margin-bottom:8pt;line-height:115%;font-size:12pt;font-family:Aptos , sans-serif;">You’ve used AI and agentic tools to automate or uplift real risk work, and you’re fluent with GRC tooling (e.g. Drova or equivalent).</li><li style="margin-top:0cm;margin-right:0cm;margin-bottom:8pt;line-height:115%;font-size:12pt;font-family:Aptos , sans-serif;">You use AI with discipline: fast, but you validate what it gives you before relying on it.</li><li style="margin-top:0cm;margin-right:0cm;margin-bottom:8pt;line-height:115%;font-size:12pt;font-family:Aptos , sans-serif;">You bring a relevant degree/qualification; professional risk or compliance certifications (e.g. ICA, CCRP, CAMS) are highly regarded.</li></ul><div style="margin-top:0cm;margin-right:0cm;margin-bottom:8pt;line-height:115%;font-size:12pt;font-family:Aptos , sans-serif;"> </div>Our hiring processWe use AI every day at Brighte, and we hire people who do too. Every role includes a short assessment that shows us how you put AI to work, use whatever tool you're most comfortable with, there's no trick to it.Background and reference checks (police, AML, bankruptcy) come towards the end. We use AI in parts of our recruitment process, but final decisions are made by humans. What's in it for youA front-row seat to Australia's energy transition. Brighte finances and electrifies homes at scale — solar, batteries, hot water, heating — and our enterprise partners are central to this.On top of that:<ul style="margin-top:0cm;margin-bottom:0cm;"><li style="margin-top:0cm;margin-right:0cm;margin-bottom:8pt;line-height:115%;font-size:12pt;font-family:Aptos , sans-serif;">Hybrid working. 3 days in office, 2 from home.</li><li style="margin-top:0cm;margin-right:0cm;margin-bottom:8pt;line-height:115%;font-size:12pt;font-family:Aptos , sans-serif;">We love our Socials - lunches, drinks, snacks, table tennis, a properly stocked pantry, and the company of people you actually like.</li><li style="margin-top:0cm;margin-right:0cm;margin-bottom:8pt;line-height:115%;font-size:12pt;font-family:Aptos , sans-serif;">Employee Share Option Plan (ESOP). Share in Brighte's success.</li><li style="margin-top:0cm;margin-right:0cm;margin-bottom:8pt;line-height:115%;font-size:12pt;font-family:Aptos , sans-serif;">End-of-trip facilities for cyclists, including showers and towel service.</li><li style="margin-top:0cm;margin-right:0cm;margin-bottom:8pt;line-height:115%;font-size:12pt;font-family:Aptos , sans-serif;">Anniversary leave. An extra day off each year to mark your time with us.</li></ul>

Brighte is a digital payments platform for home energy improvements. It was launched in 2015 by Katherine McConnell, with the mission to help people create energy efficient homes. Brighte offers 0% interest payment plans that remove the upfront cost barrier of big ticket items like solar and batteries for homeowners. On the flipside, vendors receive the prompt lump sum payment they need as soon as they complete the job. Brighte is backed by Grok Investments, Airtree Ventures and Skip Capital as well as strategic supporters KPMG, Equifax, IBM and Stone and Chalk. Brighte is a leading Australian fintech company and has been widely recognised for its innovative, distruptive offering in the home improvements market.

Senior Risk Manager

About Brighte Our mission is to make consumer energy resources (CER) affordable and accessible for everyone.Brighte is building the platform to enable and accelerate the energy transition by making it affordable, easy and less risky to buy and sell energy equipment.Our founder and CEO, Katherine McConnell, has been awarded Telstra Businesswoman of the year in 2020 as well as winning the Sustainability Crusader award at B&amp;T's 2023 Women Leading Tech Awards. She is a passionate and humble leader who has a human first approach to business.As a business in 2025, we have been named a AFR Sustainability Leader within the Banking and Finance category and won the inaugural Sustainability Award at the Affies in 2024! What You’ll Do<ul><li>Advise the business on risk. Be the trusted subject-matter expert: identify risks early, advise on risk-in-change as products and processes develop, and help teams treat risk as an enabler, not a blocker.</li><li>Own incidents and breaches end-to-end. Run incident management so issues are recorded, investigated and resolved in line with policy and obligations, drive root-cause analysis and remediation, and support breach management with Compliance and Legal.</li><li>Lead controls assurance. Test how effective key controls are, enable first-line testing, run independent second-line reviews, and report findings, escalating material weaknesses where they matter.</li><li>Keep the risk picture current. Maintain risk, incident and Risk-in-Change registers in Brighte’s GRC tooling (e.g. Drova), support the Risk Appetite Statement, and report to the Leadership Team, Risk &amp; Compliance Committee and Board.</li><li>Lift risk maturity. Improve the framework, tools and templates, and design and deliver risk training so the business gets more right on its own.</li><li>Work AI-first. AI runs through the whole risk lifecycle here, and we expect you to push it further. Use agentic AI to identify, assess and monitor risk and controls and to generate real-time, decision-quality insight. You validate and assure every output for accuracy, completeness, bias and confidentiality before anyone relies on it; you advise on the thresholds, escalation triggers and human-in-the-loop checkpoints that the business sets and owns,and monitor whether they’re met; and you understand the tooling well enough to know its failure modes and limits. AI does the heavy lifting. You stay accountable for the judgement.</li></ul> What You’ll Bring<ul><li>You’ve spent around 6+ years in risk management within regulated financial services, consumer credit or fintech.</li><li>You’ve worked second-line risk in a regulated lender, hands-on across incident management, controls assurance and operational risk, with strong documentation discipline.</li><li>You can translate risk frameworks into practical controls, testing and evidence, not just describe them.</li><li>You know the NCCP Act, Corporations Act, ASIC AFSL/ACL obligations and conduct risk, and how risk oversight intersects with AML/CTF and Privacy.</li><li>You’ve used AI and agentic tools to automate or uplift real risk work, and you’re fluent with GRC tooling (e.g. Drova or equivalent).</li><li>You use AI with discipline: fast, but you validate what it gives you before relying on it.</li><li>You bring a relevant degree/qualification; professional risk or compliance certifications (e.g. ICA, CCRP, CAMS) are highly regarded.</li></ul><div> </div>Our hiring processWe use AI every day at Brighte, and we hire people who do too. Every role includes a short assessment that shows us how you put AI to work, use whatever tool you're most comfortable with, there's no trick to it.Background and reference checks (police, AML, bankruptcy) come towards the end. We use AI in parts of our recruitment process, but final decisions are made by humans. What's in it for youA front-row seat to Australia's energy transition. Brighte finances and electrifies homes at scale — solar, batteries, hot water, heating — and our enterprise partners are central to this.On top of that:<ul><li>Hybrid working. 3 days in office, 2 from home.</li><li>We love our Socials - lunches, drinks, snacks, table tennis, a properly stocked pantry, and the company of people you actually like.</li><li>Employee Share Option Plan (ESOP). Share in Brighte's success.</li><li>End-of-trip facilities for cyclists, including showers and towel service.</li><li>Anniversary leave. An extra day off each year to mark your time with us.</li></ul>

Senior Risk Manager

About the Job

About the Company

Brighte

Similar Jobs

Risk Advisory Business Partner-Operational Risk

Risk Advisory Business Partner-Operational Risk

Senior GRC Analyst

Senior GRC Analyst

Senior Compliance Manager

Senior Compliance Manager

Senior Risk Manager

Senior Risk Manager

Senior Risk Consultant - Advisory

Senior Risk Consultant - Advisory

Senior Risk Consultant - Advisory

Senior Risk Consultant - Advisory

Senior Risk Consultant - Advisory

Senior Risk Consultant - Advisory

Senior Associate - IT

Senior Associate - IT

Operational Risk - Principal

Operational Risk - Principal

Project Controls Manager

Project Controls Manager