Senior Risk Leader: Enterprise Risk & AI Governance

Defence Health Ltd; Melbourne; On-site; AUD 180,000 - 240,000; Full time

Job summary

Defence Health Ltd is seeking a Senior Risk Manager to strengthen our Enterprise Risk Management Framework and provide practical, commercially focused advice to leaders. Reporting to the Chief of Risk, Compliance & Cyber Resilience, you will lead the second-line risk function, oversee risk technology, cyber resilience, AI risk governance, assurance and internal audit programs.

You will build risk capability and culture across the organisation, embedding the three lines of defense and reporting

Qualifications

• At least 7+ years’ risk management experience.
• Tertiary qualification in risk management, business, law, accounting or related discipline.
• Experience leading a second-line risk function and developing an ERM framework in an APRA-regulated organisation.
• Proven ability to foster a strong risk culture and influence stakeholders at all levels.
• Excellent organisational, stakeholder management, critical thinking and communication skills.
• Strong business writing and presentation capability to communicate with executives, committees and Boards.
• Ability to work autonomously and manage competing priorities with tight deadlines.
• Experience in artificial intelligence risk governance and cyber resilience risk governance is advantageous.
• APRA CPS 220/230/234 knowledge and ISO 31000 familiarity preferred.
• Experience presenting to Boards, committees and executive teams.
• Background in internal audit, operational risk or technology risk highly regarded.

Responsibilities

• Lead the ongoing development of the Enterprise Risk Management Framework.
• Provide practical, commercially focused risk advice to executives and leaders.
• Direct the second-line risk function and embed the three lines model across the organisation.
• Maintain Enterprise Risk Register, governance, risk and compliance systems.
• Support AI risk governance and cyber resilience risk frameworks.
• Oversee corporate insurance activities including renewals, benchmarking and claims.
• Support operational resilience, assurance, crisis management and internal audit programs.
• Prepare insightful risk reporting for leadership, executive and Board committees.
• Build risk capability and culture through training, communication and continuous improvement.

Skills

Risk management

Stakeholder management

Corporate governance

Communication skills

Board reporting

Attention to detail

Education

Tertiary qualification in risk management or related discipline

Job description

Defence Health has been looking after the health and wellbeing of the Defence community since 1953. That history matters to us but we’re also at an important point in our own story.

We’re rethinking how we work, how we lead, how we make decisions and how we organise ourselves for the future. We’re simplifying what’s become too complex, challenging habits and processes that no longer serve us and creating more room for people to use their judgement, take ownership and focus on the work that matters most.

That means this is an exciting time to join us.

We’re looking for people who are curious, thoughtful and comfortable asking “is there a better way?” People who want to contribute to where we’re heading, not just step into the way things have always been done.

Our promise remains simple: we look after our own. How we deliver on it is evolving.

The Role

Make an enterprise-wide impact in a senior risk role where your expertise will shape how Defence Health identifies, manages and responds to risk. As our Senior Risk Manager, you will help strengthen our Enterprise Risk Management Framework, provide commercially focused advice to leaders and champion a practical, risk-aware culture across the organisation.

Reporting to the Chief of Risk, Compliance & Cyber Resilience, you will play a key role in Defence Health’s second-line risk function. You will lead the ongoing development of enterprise and operational risk practices, risk technology and culture, while supporting oversight of cyber resilience, artificial intelligence risk governance, assurance and internal audit

Key accountabilities

• Lead and continually improve the Enterprise Risk Management Framework, supporting the identification, mitigation and reporting of enterprise risks.
• Provide practical, commercially focused advice and constructive challenge to executives, senior leaders and business stakeholders.
• Lead the second-line risk management function and help embed the three lines model across the organisation.
• Maintain the Enterprise Risk Register and governance, risk and compliance system, ensuring effective monitoring by risk and control owners.
• Support enterprise AI risk governance, cyber resilience risk frameworks and the use of AI in risk management.
• Oversee corporate insurance, including annual renewals, benchmarking, claims and the broker relationship.
• Support operational resilience, assurance, crisis management and the outsourced internal audit program.
• Prepare clear, insightful risk reporting for leadership, executive and Board committees.
• Build risk capability and culture through training, communication, engagement and continuous improvement.

What you’ll bring

• At least 7+ years’ risk management experience.
• A relevant tertiary qualification in risk management, business, law, accounting or a related discipline.
• Experience leading a second-line risk function and developing and maintaining an Enterprise Risk Management Framework and system in an APRA-regulated organisation.
• Proven ability to foster a strong risk culture and influence stakeholders at all levels.
• Excellent organisational, stakeholder management, critical thinking and communication skills.
• Strong business writing and presentation capability, including the ability to communicate with executives, committees and Boards.
• The ability to work autonomously, manage competing priorities and deliver to tight deadlines.
• Experience in artificial intelligence and its application to risk management.
• Risk management experience in private health insurance, financial services or a related APRA-regulated environment (highly regarded)
• Detailed knowledge of APRA CPS 220, CPS 230 and CPS 234, and the ISO 31000 risk management standard. (preferred)
• Experience presenting to Boards, committees and executive teams.
• A background in internal audit, operational risk or technology risk (highly regarded)
  

Why choose Defence Health

• Career opportunities: We grow our own and recognise initiative, high performance, and commitment with opportunities for career progression.
• Make an impact: as a purpose-driven organisation, we partner with veteran support organisations to offer meaningful volunteering experiences and connect to our community.
• Free top-tier health insurance for you and your immediate familyvalued at approx. $6,000 per year (after completing a minimum employment period).
• Competitive remuneration and health and wellbeing initiatives:Access to discounted gym memberships and an additional paid day of wellbeing leave each year.
• Company funded parental leave: Fully funded paid parental leave for eligible employees with superannuation paid for the entire length of approved parental leave
• Social Committees:connect with your colleagues, have your say, and develop new skills with our Social Club, Health and Safety, and Diversity and Inclusion Committees.
• Prime location: Our office is conveniently located on St Kilda Road with great access to public transport and local amenities.

Be careful - Don’t provide your bank or credit card details when applying for jobs. Don't transfer any money or complete suspicious online surveys. If you see something suspicious, report this job ad .

Sign in to start saving jobs in your profile.

Don’t have a Jora account? Register with:

Do you want to receive recommendations for similar jobs?