Vendor Risk & Security Assurance Specialist

HCF; Sydney; Presencial; AUD 120.000 - 150.000; Tempo integral

Benefícios oferecidos por esta vaga

Flexible working

Subsidised health cover (50%)}

Family-friendly employer

Parental leave (18 weeks)

Wellbeing programs

Product discounts

Resumo da vaga

HCF is seeking an IT Vendor Risk Specialist to strengthen how we manage technology and information security risk across our third-party ecosystem. You will evaluate security controls and provide insights to support risk decisions and regulatory compliance.

You will collaborate with business, Procurement, Cyber Security and Technology teams to identify control gaps and drive remediation, while maintaining audit-ready records and contributing to governance improvements.

Qualificações

• 3+ years’ experience in information security, risk management, technology risk, IT audit or compliance.
• Good understanding of IT processes, operational controls and Line 1 control responsibilities.
• Experience reviewing vendor assurance artefacts such as SOC 2, ISO 27001, security questionnaires, policies and control evidence.

Responsabilidades

• Perform IT Line 1 risk and assurance activities, including control assessments and third-party risk assessments for vendor engagements.
• Review vendor security and assurance documentation, including SOC 2, ISO 27001, security questionnaires, policies and control evidence.
• Assess third-party controls across access management, data protection, incident management, business continuity, vulnerability management and security governance.
• Identify and document control gaps, information security risks, recommendations and residual risk considerations, and prepare audit-ready reports.
• Partner with business owners, Procurement, Cyber Security and Technology teams to communicate vendor risks and support remediation activities.
• Maintain accurate assessment records and support audit activities with appropriate evidence and documentation.
• Contribute to the continuous improvement of vendor risk management processes, assessment templates, reporting and governance practices.

Conhecimentos

Information security

Vendor risk management

ISO 27001 / NIST

APRA CPS 234

Formação

Tertiary qualifications in IT or Cyber Security

Descrição da vaga

HCF is seeking an IT Vendor Risk Specialist to strengthen how we manage technology and information security risk across our third-party ecosystem. You will evaluate security controls and provide insights to support risk decisions and regulatory compliance.

You will collaborate with business, Procurement, Cyber Security and Technology teams to identify control gaps and drive remediation, while maintaining audit-ready records and contributing to governance improvements.