Technology Risk Analyst

Southern Cross Medical Care Society; Auckland; On-site; NZD 90,000 - 130,000; Full time

Job summary

Southern Cross Health Insurance is seeking a Technology Risk Analyst on a fixed-term basis until 30 June 2027 to support risk management across Digital Platforms. You will partner with stakeholders, design and test controls, and assess third-party risk to ensure a mature control environment.

The role requires 3–5 years in technology risk/assurance, expertise in COBIT/NIST/ITIL/ISO 27001/CIS/NZISM and relevant certifications. Auckland-based with strong communication and collaboration skills.

Qualifications

• 3-5 years' proven experience in a similar technology risk or assurance role.

Responsibilities

• Performing process walkthroughs and control testing to identify, assess and appropriately manage technology risks and controls across Digital Platforms
• Ensuring business unit top risks have appropriate mitigants in place, with risk and issue registers kept up to date
• Acting as a trusted adviser on technology risk, building strong relationships with control owners and performers, and providing expert risk and controls advice to stakeholders across Digital Platforms and the wider business
• Delivering risk coaching, awareness and monitoring to drive a positive risk management culture and appropriate behaviours
• Reviewing vendors and suppliers against Southern Cross's security, operational resilience and privacy requirements, including assessing service organisation assurance reports (ISAE 3402, SOC1, SOC2) for key vendors
• Partnering with Procurement and Legal to perform security risk assessments for new vendors and manage third-party risk
• Contributing to information security policies, procedures, standards and guidelines, and supporting the continued uplift of risk management practices and assurance capability
• Providing timely, relevant and insightful reporting to the Digital Platforms Leadership Team and governance committees

Skills

Risk management

Stakeholder engagement

Controls testing

Security risk advice

Verbal & written communication

Education

Relevant tertiary qualification in technology

CISA/CRISC/CISSP certification advantageous

Tools

COBIT

NIST

ITIL

ISO 27001

CIS

NZISM

Job description

About us

Southern Cross Health Insurance is shaping a healthier Aotearoa New Zealand. Our purpose is simple: empowering our members to live well for longer. We're here to give peace of mind through timely access to quality care, inspire healthier living, and lead positive change across the health system. As a New Zealand-owned, member-based organisation, we're building a future where wellbeing is at the heart of everything we do -- delivering exceptional value for our members and creating an environment where our people thrive. Now is an exciting time to join us. You'll be part of a high-performing, values-driven team where people are at the heart of everything we do -- and in return for your talent, you'll have the opportunity to grow, make an impact, and be proud of the difference your work makes.

About the role

We are looking for a Technology Risk Analyst to join our Information & Security team on a fixed-term basis until 30 June 2027, supporting the implementation and operation of effective risk management practices across Digital Platforms. You'll partner with stakeholders across Digital Platforms to make sure technology risks are appropriately mitigated, supporting control owners to design and implement effective controls and carrying out controls testing that gives management clear visibility over how effective and mature our control environment really is. You'll also work closely with our Procurement and Legal teams, carrying out security risk assessments for new vendors and helping manage third-party risk.

Key responsibilities include:

• Performing process walkthroughs and control testing to identify, assess and appropriately manage technology risks and controls across Digital Platforms
• Ensuring business unit top risks have appropriate mitigants in place, with risk and issue registers kept up to date
• Acting as a trusted adviser on technology risk, building strong relationships with control owners and performers, and providing expert risk and controls advice to stakeholders across Digital Platforms and the wider business
• Delivering risk coaching, awareness and monitoring to drive a positive risk management culture and appropriate behaviours
• Reviewing vendors and suppliers against Southern Cross's security, operational resilience and privacy requirements, including assessing service organisation assurance reports (ISAE 3402, SOC1, SOC2) for key vendors
• Partnering with Procurement and Legal to perform security risk assessments for new vendors and manage third-party risk
• Contributing to information security policies, procedures, standards and guidelines, and supporting the continued uplift of risk management practices and assurance capability
• Providing timely, relevant and insightful reporting to the Digital Platforms Leadership Team and governance committees

You're a self-starter with strong verbal and written communication skills, comfortable conveying key messages to a range of audiences and confident working independently or as part of a team, even when priorities shift quickly.

Ideally you will also have:

• 3-5 years' proven experience in a similar technology risk or assurance role
• A solid understanding of IT and cyber frameworks, standards and methodologies (e.g. COBIT, NIST, ITIL, ISO 27001, CIS, NZISM)
• Industry certification such as CISA, CRISC or CISSP (advantageous)
• A relevant tertiary qualification in a technology-related discipline (beneficial)

Join a proud, diverse team, that's always there, always real, always true. If you thrive in a caring, honest and open culture, we think you'll love working with us.

Te Kupenga, we offer an excellent work/life balance. You will be supported to continually learn and improve your skills, share knowledge and ideas and be part of an amazing values-based culture where people are at its heart.

You will be able to participate in aspects of our employee wellness programme to help empower you and your whānau to live your healthiest lives.

At Southern Cross, our strength is our people. Your wellbeing shines through every aspect of your work.

This role is Auckland based. While we appreciate interest from candidates in other locations, we're unfortunately not able to consider remote options.

We are proud to have taken the Pride Pledge, reflecting our commitment to inclusion and belonging. We also facilitate an active, employee‑led Diversity, Equity and Inclusion Forum, which includes our Rainbow Network, Māori Network, Pasifika Collective, and Neurodiversity and Whānau Support networks.

Ngākau nui. Āhurutanga. Tikanga.

About us Southern Cross Health Insurance is shaping a healthier Aotearoa New Zealand. Our purpose is simple: empowering our members to live well for longer. We’re here to give peace of mind through timely access to quality care, inspire healthier living, and lead positive change across the health system. As a New Zealand-owned, member-based organisation, we’re building a future where wellbeing is at the heart of everything we do – delivering exceptional value for our members and creating an environment where our people thrive. Now is an exciting time to join us. You’ll be part of a high-performing, values-driven team where people are at the heart of everything we do – and in return for your talent, you’ll have the opportunity to grow, make an impact, and be proud of the difference your work makes.