IT Risk & Governance Lead: Audits & Compliance

HCF; Sydney; On-site; AUD 110,000 - 170,000; Full time

Job summary

HCF Australia is seeking an IT Risk and Governance Specialist to oversee IT governance, compliance, and control testing across the IT environment. The role focuses on ensuring operations stay compliant with regulatory and internal requirements while supporting audit readiness.

You will manage IT audits, document testing methodologies, and communicate findings to stakeholders. A graduate IT or engineering degree and experience with SOC 2, ISO 27001/2, COBIT, and CRISC are highly regarded.

Qualifications

• 3+ years in IT risk or compliance role.
• Understanding of ISMS standards (SOC 2, ISO 27001/2, COBIT, CRISC).
• Experience with IT governance and control testing.
• Strong communication skills and stakeholder engagement.
• Graduate degree in IT or engineering.

Responsibilities

• Support implementing IT governance and compliance across IT services.
• Perform design and operating effectiveness testing for defined IT controls.
• Conduct control assurance to identify gaps and propose solutions.
• Develop and operationalize IT processes and document evaluation results.
• Prepare detailed control and risk reports for audit purposes.
• Communicate issues and control gaps to stakeholders.
• Highlight critical issues and assess potential impacts.
• Engage with internal and external audit teams.
• Maintain knowledge of IT risk and regulatory standards.
• Collaborate with business and technology teams to improve controls.

Skills

IT risk governance

Stakeholder management

Regulatory compliance

Information security controls

Analytical problem-solving

Education

Graduate degree in IT or related field

Tools

SharePoint

Excel

PowerPoint

Job description

HCF Australia is seeking an IT Risk and Governance Specialist to oversee IT governance, compliance, and control testing across the IT environment. The role focuses on ensuring operations stay compliant with regulatory and internal requirements while supporting audit readiness.

You will manage IT audits, document testing methodologies, and communicate findings to stakeholders. A graduate IT or engineering degree and experience with SOC 2, ISO 27001/2, COBIT, and CRISC are highly regarded.