An exciting permanent opportunity to join as a IT Risk and Governance Specialist in HCF Australia.
This role exists to perform IT Governance and Compliance across the IT business environment to ensure operational excellence and continue to deliver services that are compliant with regulatory and organisational requirements.
The role is responsible for managing IT Audits, Compliance and Line 1 Controls Assurance across all IT services.
Responsibilities:
Support in implementing the IT governance and compliance processes across IT services
Perform design and operating effectiveness testing for the defined IT controls
Conducting control assurance to identify control gaps and recommend solutions
Contribute to development, review, operationalization of IT processes
Document the control evaluation process, including the methodology, testing results, and any identified deficiencies. Maintain comprehensive records for audit purposes
Exhibit high attention to details in identifying, aggregating, and communicating issues and control gaps to appropriate stakeholders
Compile detailed reports on the effectiveness of internal controls, including any identified weaknesses and recommended improvements
Highlight critical issues and their potential impact on the organization
Use feedback from reporting to enhance the control evaluation process
Implement best practices and lessons learned to improve the overall control environment
Periodic reporting on IT Risk and Control Testing
Demonstrate understanding of operational risk, control testing methodologies, and related regulatory and compliance standards
Facilitate IT Audits – review and collation of evidence as required; interaction with audit teams (internal, external)
Essentials
Three (3) or more years of solid experience in an IT Risk, Compliance role
Detailed understanding of governance and risk management
Proficient in Microsoft tools like SharePoint, Excel, PowerPoint
Good analytical and problem-solving skills - Can ask effective questions and collect facts from multiple sources in order to solve problems
Must possess a positive attitude and excellent team player
Experience in a role balanced between business stakeholders and a central technology service organisation
Strong understanding of information security controls and ISMS standards such as SOC 2, ISO 27001/2, COBIT, CRISC
Experience collaborating with multiple stakeholders across functional and technical skill sets
Education Level: Graduate Degree (e.g. BIT, BSc) or equivalent work experience in Information Technology or an equivalent engineering discipline
Certifications, such as CISSP, CRISC, CISA, CIPP, CISM, aren’t a prerequisite however are well regarded
Ability to instill confidence in the business and demonstrate the business value of IT
Ability to manage senior stakeholders and build effective relationships across technology & business
Strong verbal and written communication skills
About HCF
At HCF, our purpose is to bring our human touch to healthcare. Since 1932 we’ve been putting our members and their health first. As Australia’s largest not-for-profit health fund, we cover 2 million members with health, life, travel and pet insurance and our vision is to make healthcare understandable, affordable, high quality and member centric.
We want to be true health partners to our members, easily guiding the healthcare choices that are right for them. At HCF, our values are the way we do things and create the necessary culture to help us realise our purpose and deliver our Strategy. Living our values in action we step forward, walk in their shoes, stay human, make it better and get there together.
Culture & Benefits
Purpose-driven passion
We’re united by a common purpose: to make healthcare affordable, understandable, high quality and member-focused.
Wellness and work-life balance
We’ll empower you with the necessary skills and tools to support your personal wellbeing journey, ensuring you perform at your best. Our offerings…