Bring your authentic and passionate self to this exceptional role #careerswithimpact
Are you a tech-savvy risk professional who thrives on driving real impact? Join HESTA's technology team where your expertise will support meaningful change for our members. Reporting to the Manager, Technology Risk, you'll play a key role in supporting the technology and broader operations function in ensuring systems, processes and practices comply with relevant frameworks, policies, guidelines and regulatory requirements. You'll provide guidance on how to effectively identify and mitigate risk, conduct assessments, data analysis, reporting, insights and support technology teams to implement uplift in an agile environment.
What You'll Do
Risk Analysis
- Identify and assess potential risks and issues related to technology delivery and operations across the enterprise.
- Identify and document gaps, providing recommendations for remediation and assist in the preparation of risk treatment plans.
- Provide advice on technology controls to support adherence to relevant policies and regulatory requirements.
Risk Monitoring & Reporting
- Prepare risk reports and documentation for internal and external stakeholders.
- Monitor and report on risk indicators, controls, incidents and treatment plans.
Stakeholder Management
- Work closely with cross-functional teams including Compliance, Enterprise Risk, Information Security and Regulatory Change and Engagement.
- Act as the SME trusted advisor on technology risk matters, providing guidance and support to internal stakeholders.
What You'll Bring
- Proven experience in technology risk or operations (service management), ideally in superannuation or financial services.
- Experience in conducting assurance to assess an organisation's adherence to security policies and regulatory requirements.
- Experience collaborating with key stakeholders to identify, support and alert on technology risk issues, incidents and vulnerabilities.
- Knowledge of regulatory frameworks related to risk and information security (e.g., CPS234, CPS230, CPS220)
- Understanding of technology operational processes and general technology concepts, protocols, principles and best practices
- Understanding of information technology and security best practice standards and guidelines (e.g., COBIT, ITIL, ISO 27001, NIST)
- Knowledge of cloud platforms (e.g., AWS, Azure) and third-party risk management.
- Ability to simplify and communicate complex risk concepts to technical and non-technical audiences.
- Strong stakeholder relationship and third partner management skills.
- Skilled in tools like Power BI, and familiar with Agile ways of working.
- A curious, analytical mindset and a drive to improve and innovate.
- Tertiary qualifications in technology, data, risk and compliance or related discipline.
- Certifications in ITIL, COBIT, CRISC, CISM will be advantageous.
If you're ready to apply your technology risk expertise in a role with purpose - we'd love to hear from. Apply Now
Perks that matter and make a difference for our employees
- Leave for those moments that matter, an additional 6 days of leave at the end of year, up to 6 days paid volunteer leave, gender neutral paid parental leave of 20 weeks, Gender Affirmation leave, reproductive health and wellbeing leave, Cultural and Ceremonial leave. Access your LSL after 3 years, take AL at half pay, and purchase up to 2 weeks additional leave (just to name a few).
- Your professional development matters, up to $5k per year professional development and up to 8 days professional development leave, HESTA scholarships and free access to a range of premium learning tools.
- Your health and wellbeing matters, free annual flu shots and skin checks, incredible social events throughout the year and a comprehensive employee assistance program available 24/7.
- Your financial wellbeing matters, up to 15% super, financial planning support, end of year payment for all Enterprise Agreement-covered employees, incentivised Employee Referral Program and novated lease options.
We celebrate, value and include people of all backgrounds, genders, identities, cultures and abilities. We welcome and support applications from First Nations people, physically, neuro or culturally diverse, LGBTQI+, and people of any age. We are proud to be WGEA accredited as an Employer of Choice for Gender Equity.
We want all candidates to feel safe, included and provided with the best opportunity to thrive, if you require reasonable adjustments during your application or throughout the recruitment process, please reach out to a member of the Talent team *******@hesta.com.au and we'll call you to discuss.
Please note: Applications via recruitment agencies will not be accepted for this position.