IT Risk & Governance Specialist

Ventia; Sydney; On-site; AUD 120,000 - 160,000; Full time

Benefits offered by this job

Flexible working arrangements

50% subsidy on hospital and/or extras

Family-friendly certified employer

18 weeks of parental leave

Mental health and wellbeing programs

Discounts on products and services

Job summary

HCF is seeking an IT Risk and Governance Specialist to oversee IT governance and compliance across the IT environment. You will manage IT audits, compliance activities and line 1 controls assurance to ensure regulatory alignment and operational excellence.

Key responsibilities include testing IT controls, identifying gaps, reporting findings, and collaborating with stakeholders to strengthen the control environment. A graduate degree and ISMS knowledge are preferred.

Qualifications

• Graduate degree or equivalent in information technology or engineering.
• Experience in IT risk, compliance and governance with audits.
• Familiarity with ISMS standards (SOC 2, ISO 27001/2, COBIT, CRISC).
• Strong stakeholder management and communication skills.

Responsibilities

• Support IT governance and compliance processes across IT services.
• Assist design and operating effectiveness testing for IT controls.
• Conduct control assurance and identify gaps with recommendations.
• Develop and operationalize IT processes and document evaluations.
• Prepare detailed reports on internal controls and weaknesses.
• Communicate issues and their impact to stakeholders.
• Coordinate IT audits with internal and external teams.
• Monitor risk and control testing and apply best practices.

Skills

IT risk

Governance

Compliance

Audits

Stakeholder management

Microsoft SharePoint

Microsoft Excel

PowerPoint

Analytical thinking

Team player

Education

Graduate Degree (e.g. BIT, BSc) or equivalent

Tools

SharePoint

Excel

PowerPoint

Job description

An exciting permanent opportunity to join as a IT Risk and Governance Specialist in HCF Australia.

This role exists to perform IT Governance and Compliance across the IT business environment to ensure operational excellence and continue to deliver services that are compliant with regulatory and organisational requirements.

The role is responsible for managing IT Audits, Compliance and Line 1 Controls Assurance across all IT services.

Responsibilities:

• Support in implementing the IT governance and compliance processes across IT services
• Perform design and operating effectiveness testing for the defined IT controls
• Conducting control assurance to identify control gaps and recommend solutions
• Contribute to development, review, operationalization of IT processes
• Document the control evaluation process, including the methodology, testing results, and any identified deficiencies. Maintain comprehensive records for audit purposes
• Exhibit high attention to details in identifying, aggregating, and communicating issues and control gaps to appropriate stakeholders
• Compile detailed reports on the effectiveness of internal controls, including any identified weaknesses and recommended improvements
• Highlight critical issues and their potential impact on the organization
• Use feedback from reporting to enhance the control evaluation process
• Implement best practices and lessons learned to improve the overall control environment
• Periodic reporting on IT Risk and Control Testing
• Demonstrate understanding of operational risk, control testing methodologies, and related regulatory and compliance standards
• Facilitate IT Audits – review and collation of evidence as required; interaction with audit teams (internal, external)
• Three (3) or more years of solid experience in an IT Risk, Compliance role
• Detailed understanding of governance and risk management
• Proficient in Microsoft tools like SharePoint, Excel, PowerPoint
• Good analytical and problem-solving skills - Can ask effective questions and collect facts from multiple sources in order to solve problems
• Must possess a positive attitude and excellent team player
• Experience in a role balanced between business stakeholders and a central technology service organisation
• Strong understanding of information security controls and ISMS standards such as SOC 2, ISO 27001/2, COBIT, CRISC
• Experience collaborating with multiple stakeholders across functional and technical skill sets
• Education Level: Graduate Degree (e.g. BIT, BSc) or equivalent work experience in Information Technology or an equivalent engineering discipline
• Certifications, such as CISSP, CRISC, CISA, CIPP, CISM, aren’t a prerequisite however are well regarded
• Ability to instill confidence in the business and demonstrate the business value of IT
• Ability to manage senior stakeholders and build effective relationships across technology & business
• Strong verbal and written communication skills

About HCF

At HCF, our purpose is to bring our human touch to healthcare. Since 1932 we’ve been putting our members and their health first. As Australia’s largest not-for-profit health fund, we cover 2 million members with health, life, travel and pet insurance and our vision is to make healthcare understandable, affordable, high quality and member centric.

We want to be true health partners to our members, easily guiding the healthcare choices that are right for them. At HCF, our values are the way we do things and create the necessary culture to help us realise our purpose and deliver our Strategy. Living our values in action we step forward, walk in their shoes, stay human, make it better and get there together.

Purpose-driven passion

We’re united by a common purpose: to make healthcare affordable, understandable, high quality and member-focused.

Wellness and work-life balance

We’ll empower you with the necessary skills and tools to support your personal wellbeing journey, ensuring you perform at your best. Our offerings include:

• Flexible working arrangements
• 50% subsidy on HCF hospital and/or extras cover
• Family-friendly certified employer
• 18 weeks of parental leave for all new parents
• Mental health and wellbeing programs, including workshops, fitness classes, flu vaccinations, skin checks and more
• Discounts on HCF’s products, including life, pet and travel Insurance, as well as discounts at Fitness First gyms and on our eyecare products.

Collaboration and inclusivity

We embrace diversity as our strength and are committed to maintaining an inclusive and collaborative work environment. Our workplace is welcoming and safe for all our employees, irrespective of their unique characteristics including age, ethnicity, cultural or spiritual background, gender identity, disability, education and socio-economic status.

Continuous learning and growth

We believe in lifelong learning. HCF provides opportunities for personal and professional development. From workshops to mentorship programs, we encourage your growth and curiosity.