Vendor Risk & Security Assurance Specialist

The Hospitals Contribution Fund Of Australia; Sydney; Vor Ort; AUD 110.000 - 170.000; Vollzeit

Benefits dieser Stelle

Flexible working

Health cover subsidy

Family-friendly policy

Parental leave (18 weeks)

Wellbeing programs

Product discounts

Zusammenfassung

The Hospitals Contribution Fund Of Australia (HCF) is seeking an IT Vendor Risk Specialist to strengthen how we manage technology and information security risk across our third-party ecosystem. You will assess vendor risk, review security controls and provide practical insights to support risk decisions and regulatory compliance.

You will partner with business, Procurement, Cyber Security and Technology teams to ensure robust risk assessment processes, maintain audit-ready documentation and

Qualifikationen

• 3+ years' experience in information security, risk management, technology risk, IT audit or compliance.
• Knowledge of IT processes and Line 1 control responsibilities.
• Experience reviewing vendor assurance artefacts (SOC 2, ISO 27001, security questionnaires, policies, control evidence).

Aufgaben

• Perform IT Line 1 risk and assurance activities, including control assessments and third-party risk assessments.
• Review vendor security and assurance documentation such as SOC 2 and ISO 27001 reports.
• Assess third-party controls across access management, data protection, incident management, business continuity and security governance.
• Document control gaps, risks and audit-ready assessment reports.
• Collaborate with business owners, Procurement, Cyber Security and Technology teams on risk treatments.
• Maintain assessment records and support audits.
• Improve vendor risk management processes and templates.

Kenntnisse

Information security

Risk management

IT audit

Compliance

Vendor risk assessment

Ausbildung

Relevant tertiary qualifications in IT/Cyber/Risk

Tools

SOC 2 evidence reviews

ISO 27001

COBIT

NIST frameworks

Jobbeschreibung

The Hospitals Contribution Fund Of Australia (HCF) is seeking an IT Vendor Risk Specialist to strengthen how we manage technology and information security risk across our third-party ecosystem. You will assess vendor risk, review security controls and provide practical insights to support risk decisions and regulatory compliance.

You will partner with business, Procurement, Cyber Security and Technology teams to ensure robust risk assessment processes, maintain audit-ready documentation and