Tech Risk Analyst: Elevate Security & Vendor Oversight

Southern Cross Medical Care Society; Auckland; On-site; NZD 90,000 - 130,000; Full time

Job summary

Southern Cross Health Insurance is seeking a Technology Risk Analyst on a fixed-term basis until 30 June 2027 to support risk management across Digital Platforms. You will partner with stakeholders, design and test controls, and assess third-party risk to ensure a mature control environment.

The role requires 3–5 years in technology risk/assurance, expertise in COBIT/NIST/ITIL/ISO 27001/CIS/NZISM and relevant certifications. Auckland-based with strong communication and collaboration skills.

Qualifications

• 3-5 years' proven experience in a similar technology risk or assurance role.

Responsibilities

• Performing process walkthroughs and control testing to identify, assess and appropriately manage technology risks and controls across Digital Platforms
• Ensuring business unit top risks have appropriate mitigants in place, with risk and issue registers kept up to date
• Acting as a trusted adviser on technology risk, building strong relationships with control owners and performers, and providing expert risk and controls advice to stakeholders across Digital Platforms and the wider business
• Delivering risk coaching, awareness and monitoring to drive a positive risk management culture and appropriate behaviours
• Reviewing vendors and suppliers against Southern Cross's security, operational resilience and privacy requirements, including assessing service organisation assurance reports (ISAE 3402, SOC1, SOC2) for key vendors
• Partnering with Procurement and Legal to perform security risk assessments for new vendors and manage third-party risk
• Contributing to information security policies, procedures, standards and guidelines, and supporting the continued uplift of risk management practices and assurance capability
• Providing timely, relevant and insightful reporting to the Digital Platforms Leadership Team and governance committees

Skills

Risk management

Stakeholder engagement

Controls testing

Security risk advice

Verbal & written communication

Education

Relevant tertiary qualification in technology

CISA/CRISC/CISSP certification advantageous

Tools

COBIT

NIST

ITIL

ISO 27001

CIS

NZISM

Job description

Southern Cross Health Insurance is seeking a Technology Risk Analyst on a fixed-term basis until 30 June 2027 to support risk management across Digital Platforms. You will partner with stakeholders, design and test controls, and assess third-party risk to ensure a mature control environment.

The role requires 3–5 years in technology risk/assurance, expertise in COBIT/NIST/ITIL/ISO 27001/CIS/NZISM and relevant certifications. Auckland-based with strong communication and collaboration skills.