Vendor Risk & Security Assurance Lead

The Hospitals Contribution Fund Of Australia Limited; Sydney; Híbrido; AUD 120.000 - 150.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Flexible working arrangements

Parental leave (18 weeks)

Wellbeing programs

Product discounts

Descripción de la vacante

The Hospitals Contribution Fund Of Australia Limited is seeking an IT Vendor Risk Specialist to strengthen how technology and information security risk is managed across our third-party ecosystem. You will work with business and technology teams to assess vendor risk, review security controls, and provide practical insights that support risk decisions and regulatory compliance.

You will perform Line 1 risk activities, review SOC 2 and ISO 27001 artefacts, assess controls across access, data

Formación

• 3+ years’ experience in information security, risk management, technology risk, IT audit or compliance.
• Understanding of IT processes, controls and Line 1 responsibilities.
• Experience reviewing vendor assurance artefacts such as SOC 2, ISO 27001, security questionnaires, policies and control evidence.
• Knowledge of ISO 27001/27002, NIST, SOC 2, COBIT, APRA CPS 234 and APRA CPS 230.

Responsabilidades

• Perform IT Line 1 risk and assurance activities for vendor engagements, including control assessments and evidence reviews.
• Review vendor security documentation such as SOC 2 reports, ISO 27001 certifications, security questionnaires, policies and control evidence.
• Assess third-party controls across access management, data protection, incident management, business continuity, vulnerability management and security governance.
• Identify control gaps and residual risk, and prepare audit-ready assessment reports.
• Partner with business owners, Procurement, Cyber Security and Technology teams to communicate vendor risks and support remediation.
• Maintain accurate assessment records and support internal and external audit activities.
• Contribute to continuous improvement of vendor risk management processes, templates, reporting and governance.

Conocimientos

Information security

Risk management

IT audit

Compliance

SOC 2

ISO 27001

NIST

Vendor risk

Educación

Bachelor's degree in IT/Cyber Security

Descripción del empleo

The Hospitals Contribution Fund Of Australia Limited is seeking an IT Vendor Risk Specialist to strengthen how technology and information security risk is managed across our third-party ecosystem. You will work with business and technology teams to assess vendor risk, review security controls, and provide practical insights that support risk decisions and regulatory compliance.

You will perform Line 1 risk activities, review SOC 2 and ISO 27001 artefacts, assess controls across access, data