Strategic IT Vendor Risk & Security Lead

HCF (Australia); Sydney; Vor Ort; AUD 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

Flexible working arrangements

Parental leave

Wellbeing programs

Career development

Zusammenfassung

HCF is seeking an IT Vendor Risk Specialist to strengthen risk management across our third-party ecosystem in Australia. You will assess vendor risk, review security controls and provide practical insights to support risk decisions and regulatory compliance.

You will partner with Business, Procurement, Cyber Security and Technology teams to communicate risks, produce audit-ready assessments and drive improvements in our vendor risk programs.

Qualifikationen

• 3+ years in information security, risk management, or IT audit.
• Experience reviewing vendor assurance artefacts like SOC 2, ISO 27001, security policies.
• Ability to translate complex risk concepts into practical recommendations.

Aufgaben

• Perform IT risk and assurance activities for vendor engagements.
• Review vendor security documentation (SOC 2, ISO 27001, policies, control evidence).
• Assess third-party controls (access, data protection, incident, BCM, vulnerability, governance).
• Document control gaps, risks, recommendations and residual risk for audit-ready reports.
• Collaborate with stakeholders across business, Procurement, Cyber Security and Technology.

Kenntnisse

Vendor risk management

SOC 2 review

ISO 27001

APRA CPS 234

Risk assessment

Ausbildung

Bachelor's degree in IT or Cyber Security

Tools

GRC tools

Security questionnaires

Jobbeschreibung

HCF is seeking an IT Vendor Risk Specialist to strengthen risk management across our third-party ecosystem in Australia. You will assess vendor risk, review security controls and provide practical insights to support risk decisions and regulatory compliance.

You will partner with Business, Procurement, Cyber Security and Technology teams to communicate risks, produce audit-ready assessments and drive improvements in our vendor risk programs.