About Brighte
Our mission is to make consumer energy resources (CER) affordable and accessible for everyone.
Brighte is building the platform to enable and accelerate the energy transition by making it affordable, easy and less risky to buy and sell energy equipment.
Our founder and CEO, Katherine McConnell, has been awarded Telstra Businesswoman of the year in 2020 as well as winning the Sustainability Crusader award at B&T's 2023 Women Leading Tech Awards. She is a passionate and humble leader who has a human first approach to business.
As a business in 2025, we have been named a AFR Sustainability Leader within the Banking and Finance category and won the inaugural Sustainability Award at the Affies in 2024!
What You’ll Do
- Advise the business on risk. Be the trusted subject-matter expert: identify risks early, advise on risk-in-change as products and processes develop, and help teams treat risk as an enabler, not a blocker.
- Own incidents and breaches end-to-end. Run incident management so issues are recorded, investigated and resolved in line with policy and obligations, drive root-cause analysis and remediation, and support breach management with Compliance and Legal.
- Lead controls assurance. Test how effective key controls are, enable first-line testing, run independent second-line reviews, and report findings, escalating material weaknesses where they matter.
- Keep the risk picture current. Maintain risk, incident and Risk-in-Change registers in Brighte’s GRC tooling (e.g. Drova), support the Risk Appetite Statement, and report to the Leadership Team, Risk & Compliance Committee and Board.
- Lift risk maturity. Improve the framework, tools and templates, and design and deliver risk training so the business gets more right on its own.
- Work AI-first. AI runs through the whole risk lifecycle here, and we expect you to push it further. Use agentic AI to identify, assess and monitor risk and controls and to generate real-time, decision-quality insight. You validate and assure every output for accuracy, completeness, bias and confidentiality before anyone relies on it; you advise on the thresholds, escalation triggers and human-in-the-loop checkpoints that the business sets and owns,and monitor whether they’re met; and you understand the tooling well enough to know its failure modes and limits. AI does the heavy lifting. You stay accountable for the judgement.
What You’ll Bring
- You’ve spent around 6+ years in risk management within regulated financial services, consumer credit or fintech.
- You’ve worked second-line risk in a regulated lender, hands-on across incident management, controls assurance and operational risk, with strong documentation discipline.
- You can translate risk frameworks into practical controls, testing and evidence, not just describe them.
- You know the NCCP Act, Corporations Act, ASIC AFSL/ACL obligations and conduct risk, and how risk oversight intersects with AML/CTF and Privacy.
- You’ve used AI and agentic tools to automate or uplift real risk work, and you’re fluent with GRC tooling (e.g. Drova or equivalent).
- You use AI with discipline: fast, but you validate what it gives you before relying on it.
- You bring a relevant degree/qualification; professional risk or compliance certifications (e.g. ICA, CCRP, CAMS) are highly regarded.
Our hiring process
We use AI every day at Brighte, and we hire people who do too. Every role includes a short assessment that shows us how you put AI to work, use whatever tool you're most comfortable with, there's no trick to it.
Background and reference checks (police, AML, bankruptcy) come towards the end. We use AI in parts of our recruitment process, but final decisions are made by humans.
What's in it for you
A front-row seat to Australia's energy transition. Brighte finances and electrifies homes at scale — solar, batteries, hot water, heating — and our enterprise partners are central to this.
On top of that:
- Hybrid working. 3 days in office, 2 from home.
- We love our Socials - lunches, drinks, snacks, table tennis, a properly stocked pantry, and the company of people you actually like.
- Employee Share Option Plan (ESOP). Share in Brighte's success.
- End-of-trip facilities for cyclists, including showers and towel service.
- Anniversary leave. An extra day off each year to mark your time with us.
Skills Required
- 6+ years in risk management within regulated financial services, consumer credit or fintech
- Experience in second-line risk at a regulated lender across incident management, controls assurance and operational risk
- Strong documentation discipline and ability to run incident management, root-cause analysis and remediation
- Translate risk frameworks into practical controls, testing and evidence
- Knowledge of NCCP Act, Corporations Act, ASIC AFSL/ACL obligations, conduct risk and intersection with AML/CTF and Privacy
- Experience using AI and agentic tools to automate or uplift real risk work and fluency with GRC tooling (e.g., Drova or equivalent)
- Use AI with discipline: validate outputs for accuracy, completeness, bias and confidentiality before relying on them
- Relevant degree or qualification
- Professional risk or compliance certifications (e.g., ICA, CCRP, CAMS)
What We Do
We’re on a mission to make sustainability affordable and accessible for everyone. Our decarbonisation enablement platform helps Australians enjoy the benefits of solar energy and accelerate electrification. Founded in 2015, Brighte has helped over 150,000 households get solar sooner, partnering with over 2,200 SMEs nationally and processing over $1.9 billion in finance applications. Focusing on solar, batteries, electric vehicles, energy-efficient upgrades and home electrification, Brighte is bringing home the power of the sun and making the benefits of clean energy accessible and affordable to Australian families and businesses. If you are excited as we are about making homes, communities and businesses sustainable, please get in touch.
