About BrighteOur mission is to make consumer energy resources (CER) affordable and accessible for everyone.
Brighte is building the platform to enable and accelerate the energy transition by making it affordable, easy and less risky to buy and sell energy equipment.
Our founder and CEO, Katherine McConnell, has been awarded Telstra Businesswoman of the year in 2020 as well as winning the Sustainability Crusader award at B&T's 2023 Women Leading Tech Awards. She is a passionate and humble leader who has a human first approach to business.
As a business in 2025, we have been named a AFR Sustainability Leader within the Banking and Finance category and won the inaugural Sustainability Award at the Affies in 2024!
What You’ll Do
Advise the business on risk. Be the trusted subject-matter expert: identify risks early, advise on risk-in-change as products and processes develop, and help teams treat risk as an enabler, not a blocker.
Own incidents and breaches end-to-end. Run incident management so issues are recorded, investigated and resolved in line with policy and obligations, drive root-cause analysis and remediation, and support breach management with Compliance and Legal.
Lead controls assurance. Test how effective key controls are, enable first-line testing, run independent second-line reviews, and report findings, escalating material weaknesses where they matter.
Keep the risk picture current. Maintain risk, incident and Risk-in-Change registers in Brighte’s GRC tooling (e.g. Drova), support the Risk Appetite Statement, and report to the Leadership Team, Risk & Compliance Committee and Board.
Lift risk maturity. Improve the framework, tools and templates, and design and deliver risk training so the business gets more right on its own.
Work AI-first. AI runs through the whole risk lifecycle here, and we expect you to push it further. Use agentic AI to identify, assess and monitor risk and controls and to generate real-time, decision-quality insight. You validate and assure every output for accuracy, completeness, bias and confidentiality before anyone relies on it; you advise on the thresholds, escalation triggers and human-in-the-loop checkpoints that the business sets and owns,and monitor whether they’re met; and you understand the tooling well enough to know its failure modes and limits. AI does the heavy lifting. You stay accountable for the judgement.
What You’ll Bring
You’ve spent around 6+ years in risk management within regulated financial services, consumer credit or fintech.
You’ve worked second-line risk in a regulated lender, hands-on across incident management, controls assurance and operational risk, with strong documentation discipline.
You can translate risk frameworks into practical controls, testing and evidence, not just describe them.
You know the NCCP Act, Corporations Act, ASIC AFSL/ACL obligations and conduct risk, and how risk oversight intersects with AML/CTF and Privacy.
You’ve used AI and agentic tools to automat