Senior Risk Analyst, Controls Testing (12mth Contract)

Hi, we’re PEXA

Every time a house is bought, sold or refinanced in Australia your lawyer, conveyancer and lender will most likely use a digital platform to settle your property, this is where we come in. PEXA’s world-first digital settlement platform has revolutionised the way we exchange property in Australia helping over 20,000 people a week safely settle their homes.

Since starting our journey in 2010, we now employ a team of over 1,000 people working across multiple continents. We’re still growing, innovating and looking ahead, but behind our greatest achievements, there is a team of curious creators and big thinkers. That’s why, we’re looking for ambitious people like yourself to join the team.

A day in the life

Plan and complete testing across PEXA’s technology and business process controls, checking that each control is well designed and working as intended.

Working closely with control owners, you’ll build an understanding of their processes, gather and assess evidence, document findings and highlight any gaps or weaknesses. Where improvements are needed, you’ll agree practical actions with stakeholders and track them through to completion.

The role also supports internal and external assurance activities, including SOC 2, by maintaining accurate records and responding to evidence requests. Alongside these core responsibilities, there will be opportunities to contribute to controls transformation by simplifying or automating testing, improving evidence collection and exploring emerging solutions such as AI agents.

About the role

The Senior Risk Analyst – Controls Testing will help PEXA meet its risk, regulatory and assurance obligations by providing confidence that our key controls are effective.

This is a hands-on role combining detailed controls testing, stakeholder engagement, analysis and continuous improvement across both Technology and the broader business.

You’ll bring capability in:

Testing technology and business process controls

Assessing control design and operating effectiveness

Collecting, evaluating and documenting evidence

Identifying control gaps and supporting remediation

Analysing testing outcomes and communicating practical insights

What success looks like (6–12 months):

Delivering the annual controls testing plan accurately and on time

Maintaining clear, consistent and audit-ready testing records

Providing reliable evidence for SOC 2 and other assurance requirements

Identifying control weaknesses and supporting owners to address them

Highlighting trends, repeat issues and emerging risk themes

Contributing to improvements in testing methods, automation and evidence collection