Technology Risk and Assurance Lead

Southern Cross Medical Care Society; Auckland; On-site; NZD 140,000 - 190,000; Full time

Benefits offered by this job

Five days wellbeing leave per year

Health insurance for you and whānau

Life insurance & travel/pet insurance

Parental leave benefits

Workplace wellbeing programme

Flexi leave for study/volunteering

Job summary

Southern Cross Health Insurance seeks a Technology Risk and Assurance Lead to establish and drive our risk and assurance function. This role ensures tech, cyber, data and third-party risks are identified, assessed and managed with practical assurance for the Executive Team and Board.

You will enable innovation, including AI adoption, through risk management frameworks and evidence-based assurance, shaping controls across cloud platforms, SaaS, IAM and resilience. Auckland-based role.

Qualifications

• Proven experience leading and developing specialist teams in technology risk, assurance or audit environments.
• Extensive experience in technology risk, IT audit or assurance within regulated sectors such as insurance, financial services or healthcare.
• Professional qualifications such as CISA, CRISC, CISM or CISSP.
• Strong knowledge of control design and testing across cloud platforms, SaaS, IAM, change management and operational resilience.
• Practical experience applying frameworks such as ISO 27001, CIS Controls, NIST CSF and COBIT.
• Ability to translate complex technical risks into clear, actionable insights for executives and the Board.
• Strong analytical capability and confidence using data and AI-enabled tools for assurance activities.

Responsibilities

• Lead and develop a small, high-performing Technology Risk and Assurance team.
• Manage the technology risk framework, including risk assessments, risk registers and reporting.
• Design, test and evidence technology controls using data-driven approaches.
• Partner with Value Streams, Architecture and Delivery teams to embed risk management early in delivery lifecycles.
• Lead assurance activities supporting ISO 27001 implementation and oversee specialist assurance resources.
• Coordinate internal and external audits and regulatory engagements.
• Assess technology, vendor and AI-related risks and provide clear recommendations to stakeholders.
• Prepare executive and Board-level risk and assurance reporting.

Skills

Team leadership

Technology risk

IT audit

Stakeholder influence

Data-driven decision making

Analytical thinking

AI-enabled tooling

Education

CISA

CRISC

CISM

CISSP

Tools

ISO 27001

CIS Controls

NIST CSF

COBIT

Job description

About us

Southern Cross Health Insurance is shaping a healthier Aotearoa New Zealand. Our purpose is simple: empowering our members to live well for longer. We're here to give peace of mind through timely access to quality care, inspire healthier living, and lead positive change across the health system. As a New Zealand-owned, member-based organisation, we're building a future where wellbeing is at the heart of everything we do - delivering exceptional value for our members and creating an environment where our people thrive. Now is an exciting time to join us. You'll be part of a high-performing, values-driven team where people are at the heart of everything we do - and in return for your talent, you'll have the opportunity to grow, make an impact, and be proud of the difference your work makes.

About the role

We're looking for a Technology Risk and Assurance Lead to establish and lead our technology risk and assurance function. This role is responsible for ensuring technology, cyber, data and third-party risks are effectively identified, assessed and managed, while providing assurance to the Executive Leadership Team and Board that key controls are operating as intended. You'll play a critical role in enabling innovation, including AI adoption, through practical risk management frameworks and evidence-based assurance.

Key responsibilities

• Lead and develop a small, high-performing Technology Risk and Assurance team, building capability, accountability and continuous improvement.
• Manage the technology risk framework, including risk assessments, risk registers, risk appetite monitoring, treatment plans and reporting.
• Design, test and evidence technology controls using data-driven and automated approaches.
• Partner with Value Streams, Architecture and Delivery teams to embed risk management early in the delivery lifecycle.
• Lead assurance activities supporting our ISO 27001 implementation programme and oversee specialist assurance resources.
• Coordinate internal audit, external audit and regulatory engagements, ensuring findings are addressed effectively and sustainably.
• Assess technology, vendor and AI-related risks and provide clear, pragmatic recommendations to stakeholders.
• Prepare executive and Board-level risk and assurance reporting that supports informed decision-making.

About you

To be successful in this role, you'll bring deep expertise in technology risk, assurance or IT audit, along with the credibility to influence senior stakeholders across the business.

You'll have:

• Proven experience leading and developing specialist teams in technology risk, assurance or audit environments.
• Extensive experience in technology risk, IT audit or assurance within regulated sectors such as insurance, financial services or healthcare.
• Professional qualifications such as CISA, CRISC, CISM, CISSP or comparable credentials.
• Strong knowledge of control design and testing across cloud platforms, SaaS environments, identity and access management, change management and operational resilience.
• Practical experience applying frameworks such as ISO 27001, CIS Controls, NIST Cybersecurity Framework and COBIT.
• The ability to translate complex technical risks into clear, actionable insights for executive and Board audiences.
• Strong analytical capability, sound judgement and confidence using data and AI-enabled tools to support assurance activities.

Our values who we are and what's important to us.

Ngákau nui.

Āhurutanga.

Tikanga.

Join a team that's always there, always real, always true.

If you thrive in a purpose-driven, diverse and supportive culture, we think you'll love working with us. We know our team's culture and wellbeing drive us forward. That's why we prioritise not only professional development but opportunities to thrive personally. We offer exceptional work/life balance, and our people are encouraged - and rewarded - for living well.

What we offer you

• Five days of wellbeing leave per year (pro-rated for part-timers).
• Health insurance for you and your immediate whánau.
• Life insurance cover and discounts on pet and travel insurance.
• Extra parental leave benefits and financial wellbeing support.
• Ability to participate in our workplace wellbeing programme.
• The option to purchase flexi leave for study, volunteering, or supporting your whánau

But that's not all. If you need more time to support your whánau, we offer work-life balance, a hybrid environment and each year you have a volunteer day to spend with your team contributing to a cause or community of your choice.

This role is Auckland-based, and while we appreciate interest from candidates in other locations, we're unfortunately not able to consider remote options for this position.

Have questions? Check out our FAQs for help with the application and recruitment process.

We are proud to have taken the Pride Pledge, reflecting our commitment to inclusion and belonging.

We also facilitate an active, employee-led Diversity, Equity and Inclusion Forum, which includes our Rainbow Network, Māori Network, Pasifika Collective, and Neurodiversity and Whánau Support networks. If you share our commitment and passion, we'd love to hear from you.

We are proud to have taken the Pride Pledge, reflecting our commitment to inclusion and belonging.

We also facilitate an active, employee-led Diversity, Equity and Inclusion Forum, which includes our Rainbow Network, Māori Network, Pasifika Collective, and Neurodiversity and Whánau Support networks. If you share our commitment and passion, we'd love to hear from you.

About us

Southern Cross Health Insurance is shaping a healthier Aotearoa New Zealand. Our purpose is simple: empowering our members to live well for longer. We’re here to give peace of mind through timely access to quality care, inspire healthier living, and lead positive change across the health system. As a New Zealand-owned, member-based organisation, we’re building a future where wellbeing is at the heart of everything we do - delivering exceptional value for our members and creating an environment where our people thrive. Now is an exciting time to join us. You’ll be part of a high-performing, values-driven team where people are at the heart of everything we do - and in return for your talent, you’ll have the opportunity to grow, make an impact, and be proud of the difference your work makes.