Head Of Enterprise Risk & Governance

Medibank; Sydney; On-site; AUD 260,000 - 420,000; Full time

Job summary

Medibank is seeking a senior leader to drive enterprise risk governance and reporting. You will own the risk governance framework, lead policy governance and risk reporting to the Board, and guide uplift activities across the organisation.

You will partner with senior leaders to deliver clear risk insights and ensure regulatory obligations are met. You will bring 10+ years in enterprise risk management within financial services or regulated environments, strong APRA knowledge, and proven people

Qualifications

• 10+ years’ experience in enterprise risk management, risk governance, policy or framework development within financial services or another large, regulated organisation.
• Experience owning enterprise risk frameworks, strategies and risk appetite arrangements.
• Strong understanding of APRA prudential requirements, and experience coordinating regulatory governance and uplift activities.
• Experience leading enterprise policy governance, senior risk committees and executive or Board reporting.
• Proven people leadership experience, including setting direction, building accountability, coaching others and delivering high-quality outcomes.

Responsibilities

• Owning and maintaining enterprise risk governance arrangements and core risk documents, ensuring they remain current and aligned with strategy, risk profile and regulatory obligations.
• Leading policy governance, including document hierarchies, approval pathways, review cycles, exceptions and oversight reporting.
• Managing the governance and operating rhythm of enterprise risk committees, including agendas, papers, decisions, records and action tracking.
• Coordinating clear, timely and decision-focused enterprise risk reporting for management, executive and Board audiences.
• Leading governance and coordination of CPS 220 obligations and the annual Risk Management Declaration process.
• Providing enterprise-level thought leadership and constructive challenge to strengthen risk management practices and governance outcomes.
• Leading integrated, cross-functional risk transformation and uplift activities, ensuring outcomes transition into BAU arrangements.

Skills

Enterprise risk management

Risk governance

Policy/framework development

APRA prudential requirements

Stakeholder management

Board reporting

People leadership

Education

Bachelor's degree in a relevant field

Job description

It’s a strange thing to say, because us humans are capable of incredible things. And at Medibank, we know our greatest potential lies in the people who work with us.

We strive to make real, fundamental change, driven by a simple purpose: to create the best health and wellbeing for all of Australia. And as part of the Medibank Group, you'll join an organisation united by that shared purpose.

The Opportunity – Head of Enterprise Risk Governance & Reporting

This senior leadership role is accountable for Medibank’s enterprise risk governance arrangements, helping to ensure our risk frameworks, policies, reporting and governance practices remain clear, disciplined and aligned with regulatory expectations.

You will lead the development, maintenance and ongoing uplift of key enterprise risk documents, including the Risk Management Strategy, Risk Management Framework and Risk Appetite Statement, while overseeing policy governance, enterprise risk committees and risk reporting.

Working closely with the senior leaders, you will provide strategic guidance, constructive challenge and clear risk insights that support effective oversight and informed decision-making across Medibank.

This role also acts as the Integrated Squad Lead for the Enterprise Risk and Governance Stream of the Integrated Uplift Program (IUP), Medibank's largest Risk Uplift Program.

In this broad and influential role, you will add value by:

• Owning and maintaining Medibank’s enterprise risk governance arrangements and core risk documents, ensuring they remain current, coherent and aligned with our strategy, risk profile and regulatory obligations.
• Leading policy governance, including document hierarchies, approval pathways, review cycles, exceptions and oversight reporting.
• Managing the governance and operating rhythm of enterprise risk committees, including agendas, papers, decisions, records and action tracking.
• Coordinating clear, timely and decision-focused enterprise risk reporting for management, executive and Board audiences.
• Leading governance and coordination of CPS 220 obligations and the annual Risk Management Declaration process.
• Providing enterprise-level thought leadership and constructive challenge to strengthen risk management practices and governance outcomes.
• Leading integrated, cross-functional risk transformation and uplift activities, ensuring outcomes transition effectively into sustainable business-as-usual arrangements.

About you

You are an experienced enterprise risk leader who combines strong strategic thinking, regulatory knowledge and commercial acumen with a collaborative and pragmatic approach. You can navigate complex stakeholder environments, translate regulatory requirements into practical outcomes and communicate confidently with senior and Board-level audiences.

Key attributes and experience include:

• 10+ years’ experience in enterprise risk management, risk governance, policy or framework development within financial services or another large, regulated organisation.
• Demonstrated experience owning enterprise risk frameworks, strategies and risk appetite arrangements.
• Strong understanding of APRA prudential requirements, and experience coordinating regulatory governance and uplift activities.
• Experience leading enterprise policy governance, senior risk committees and executive or Board reporting.
• Strong influencing and stakeholder management capability, with sound judgement and the credibility to work across senior leadership groups.
• Proven people leadership experience, including setting direction, building accountability, coaching others and leading high-quality delivery.

Why work for Medibank

At Medibank, we believe work should help you live better. You'll be part of a team that's reimagining how work, wellbeing and growth come together, with the flexibility, support and opportunities to make a meaningful impact while building a career that works for you and reaching your fullest human potential.

To learn more about what's in it for you, visit: https://careers.medibank.com.au/the-medibank-experience

Be Yourself. Belong Here

We’re committed to a workplace where everyone feels safe, supported, and free to be themselves. By embracing diverse perspectives, we challenge the status quo and uncover better ideas. You can confidently bring your whole self—because your unique voice is what makes us stronger.

We welcome and encourage applications from people of all backgrounds, identities and lived experiences, including Aboriginal and Torres Strait Islander peoples, people from culturally and linguistically diverse backgrounds, LGBTQIA+ communities, people with disability, neurodivergent people, and carers.

Our employee networks create space for connection, advocacy and allyship. We offer flexible ways of working to support inclusion, accessibility and wellbeing.