Sharon Tumber
Executive Director, MinterEllison Risk and Regulatory Consulting, Sydney
I am experienced in risk, compliance, and complex regulatory change with over 10 years in industry and management consulting. My expertise spans the finance, banking, government, transport, energy, utilities and education sectors in Australia and the UK.

I leverage my expertise to develop strategies that ensure compliance, mitigate risks, and enhance operational efficiency. By working closely with executive teams, I drive transformative change that keeps companies ahead of regulatory demands and fosters long-term success.

I bring strategic insight and a deep understanding of the legal landscape. With extensive experience in risk consulting and business strategy, I collaborate with client executives to develop innovative solutions, that safeguard businesses from risks and maximise operational efficiency. I help organisations transform and confidently tackle regulatory challenges, seizing opportunities in an evolving regulatory landscape. My proven track record of improving business outcomes highlights my ability to drive success.

Career highlights

  • Confidential NZ based mutual bank: Undertook an independent assurance review of the revised compliance and complaints frameworks following an adverse regulatory review. Advised the client on the design effectiveness and operational effectiveness of its new control frameworks to ensure effective risk mitigation against its regulatory obligations.
  • Confidential superannuation client: Planned, designed and led the delivery of an obligations register for a new superannuation product that was being introduced into the market and assisted with the development of supporting compliance policies to support the client's Registrable Superannuation Entity licence applications.
  • Confidential insurance client: Led the delivery of a business technology transformation program initiative, by collaborating with the client to create a digital obligations register for seamless integration into their new Governance, Risk and Compliance (GRC) system. Furthermore, I supported the client in implementing significant organisational changes by establishing a new compliance framework aligned with an enhanced enterprise risk management framework and digitally enabled solution.
  • Confidential aged care provider: Led the development of a new compliance risk management framework within a comprehensive program aimed at enhancing the client's enterprise risk and compliance management framework. This new framework was designed to ensure the client's ability to manage complex regulatory change and comply with the regulatory changes resulting from the Royal Commission into Aged Care Quality and Safety.
  • Confidential telco provider: Advised the client on the uplift required to develop a robust compliance framework as part of a comprehensive effort to improve the client's compliance framework and align it with the ACCC's compliance program.
  • Confidential education Institution: Planned, designed and led the delivery of a legal assessment and compliance transformation program, encompassing policy and legislative obligation enhancements and organisational change management across multiple schools. This program involved assessing existing compliance management frameworks, evaluating the schools' capacity to identify, respond to, and meet obligations, as well as helping automate obligation management and integrate it with a GRC system. Additionally, I worked with the client to design a capability improvement plan aligned with the board and management's goals to attain best practices in compliance management, particularly in the face of complex regulatory changes.

Our consulting services are provided (directly and indirectly) by MinterEllison Consulting (ABN 50 017 469 292) and MinterEllison Consulting Pty Ltd (ABN 50 077 613 828), both of which are part of the MinterEllison Group. Our consulting services do not constitute legal services nor legal advice and are not provided by Australian legal practitioners acting in that capacity. The laws and regulations which govern the provision of legal services in the relevant jurisdiction do not apply to the provision of non-legal services.