Head of Enterprise Risk

About us

Resimac Group is a dynamic and leading ASX-listed non-bank lender and multi-channel distribution business in Australia and New Zealand.  We enable homeowners and businesses to achieve their dreams by providing innovative, fast and accessible lending solutions to homeowners, consumers and business across Australia and New Zealand. 

Our brands include Resimac, Resimac NZ, homeloans.com.au and Resimac Asset Finance and we’re proud to be servicing over 50,000+ current customers, with assets under management of over $15 billion, and a fast-growing workforce of over 330 people operating across Australia, New Zealand and the Philippines.

Role Purpose

Resimac is seeking a driven, commercially minded and hands-on Head of Enterprise Risk to lead and mature the organisation's enterprise risk capability.

You will be responsible for the design, ownership and ongoing effectiveness of Resimac's enterprise risk management framework, risk appetite approach, risk governance practices and enterprise risk reporting. Working closely with the Chief Risk Officer, Executive leaders and business teams, you will provide independent oversight, constructive challenge and practical risk advice that supports informed decision-making, sustainable growth and strong customer outcomes.

This is a senior leadership role requiring the ability to balance sound risk discipline with commercial judgement. The successful candidate will help embed a proactive risk culture across Resimac, strengthen risk capability across the business and ensure that material risks, issues and emerging themes are clearly understood, owned, escalated and managed.

Key Responsibilities

• Lead, maintain and continuously improve Resimac's Enterprise Risk Management Framework, including risk taxonomy, risk standards, risk assessment methodology and supporting tools.
• Own and coordinate the development, monitoring and reporting of Resimac's Risk Appetite Statement, including key risk indicators, appetite thresholds, trend analysis and escalation of material breaches or emerging concerns.
• Deliver clear, timely and insightful enterprise risk reporting through the GRC system for Executive, management and Board-level forums, translating complex risk information into practical insights and decision-useful recommendations.
• Provide independent Line 2 oversight, advice and constructive challenge to business leaders on material risks, control effectiveness, strategic initiatives, change programs and key business decisions.
• Partner with business units to embed practical risk management disciplines, including risk profiling, risk and control self-assessments, control testing, issue management and remediation tracking.
• Oversee the identification, assessment and monitoring of emerging risks, including risks associated with technology, data, cyber, fraud, outsourcing, operational resilience, regulatory change, market conditions and business transformation.
• Support effective risk governance, including the operation of management risk forums, escalation pathways, risk dashboards, risk registers and action tracking.
• Maintain and enhance risk policies, standards and procedures, ensuring they are current, practical, well understood and aligned to Resimac's broader governance framework.
• Oversee the management and reporting of incidents, issues, control gaps and remediation activities, ensuring root causes are understood and sustainable corrective actions are implemented.
• Champion a strong and pragmatic risk culture by promoting accountability, ownership, transparency and risk-informed decision-making across the organisation.
• Build trusted relationships with senior stakeholders across the business, acting as a credible adviser who can influence outcomes while maintaining appropriate independence.
• Lead, coach and develop enterprise risk team members, building capability, accountability and a high-performance culture.
• Support strategic planning and business transformation by providing forward-looking risk insights that help Resimac pursue growth opportunities within clear and well-understood risk boundaries.

Qualifications & Experience

• Significant experience in enterprise risk, operational risk, assurance, compliance or a related risk discipline within Australian financial services (banking or non-bank lending preferred).
• Demonstrated experience designing, uplifting or embedding enterprise risk frameworks, risk appetite frameworks, risk reporting, risk policies, governance structures and control assurance practices.
• Proven ability to engage with Executive teams, senior business leaders, and Board or Board Committee stakeholders, and to prepare concise, high-quality risk reporting for senior decision-makers.
• Strong analytical capability, with the ability to interpret risk data, identify trends, assess root causes and convert information into practical recommendations.
• Excellent written and verbal communication skills, including the ability to explain complex risk matters clearly and commercially to non-risk audiences.
• Experience with GRC systems, risk registers, KRIs, dashboards, control testing and risk reporting tools will be advantageous.

Personal Attributes

• Driven and outcome-oriented: takes ownership, follows through and is motivated to lift organisational risk maturity.
• Comfortable in a fast-paced environment: able to operate with pace, manage competing priorities and maintain quality under pressure.
• Commercial and pragmatic: balances strong risk discipline with practical business judgement and customer-focused outcomes.
• Confident and constructive challenger: willing to ask difficult questions, provide independent views and influence senior stakeholders with credibility.
• Hands-on and detail-aware: prepared to work in the detail while also maintaining a clear enterprise-wide perspective.
• Resilient under pressure: remains calm, focused and solutions-oriented when managing ambiguity, deadlines or complex issues.
• Values-led and accountable: demonstrates integrity, sound judgement, professionalism and a strong sense of responsibility.