Technology Risk & Assurance Lead: AI & Security Enablement

Southern Cross Medical Care Society; Auckland; On-site; NZD 140,000 - 190,000; Full time

Benefits offered by this job

Five days wellbeing leave per year

Health insurance for you and whānau

Life insurance & travel/pet insurance

Parental leave benefits

Workplace wellbeing programme

Flexi leave for study/volunteering

Job summary

Southern Cross Health Insurance seeks a Technology Risk and Assurance Lead to establish and drive our risk and assurance function. This role ensures tech, cyber, data and third-party risks are identified, assessed and managed with practical assurance for the Executive Team and Board.

You will enable innovation, including AI adoption, through risk management frameworks and evidence-based assurance, shaping controls across cloud platforms, SaaS, IAM and resilience. Auckland-based role.

Qualifications

• Proven experience leading and developing specialist teams in technology risk, assurance or audit environments.
• Extensive experience in technology risk, IT audit or assurance within regulated sectors such as insurance, financial services or healthcare.
• Professional qualifications such as CISA, CRISC, CISM or CISSP.
• Strong knowledge of control design and testing across cloud platforms, SaaS, IAM, change management and operational resilience.
• Practical experience applying frameworks such as ISO 27001, CIS Controls, NIST CSF and COBIT.
• Ability to translate complex technical risks into clear, actionable insights for executives and the Board.
• Strong analytical capability and confidence using data and AI-enabled tools for assurance activities.

Responsibilities

• Lead and develop a small, high-performing Technology Risk and Assurance team.
• Manage the technology risk framework, including risk assessments, risk registers and reporting.
• Design, test and evidence technology controls using data-driven approaches.
• Partner with Value Streams, Architecture and Delivery teams to embed risk management early in delivery lifecycles.
• Lead assurance activities supporting ISO 27001 implementation and oversee specialist assurance resources.
• Coordinate internal and external audits and regulatory engagements.
• Assess technology, vendor and AI-related risks and provide clear recommendations to stakeholders.
• Prepare executive and Board-level risk and assurance reporting.

Skills

Team leadership

Technology risk

IT audit

Stakeholder influence

Data-driven decision making

Analytical thinking

AI-enabled tooling

Education

CISA

CRISC

CISM

CISSP

Tools

ISO 27001

CIS Controls

NIST CSF

COBIT

Job description

Southern Cross Health Insurance seeks a Technology Risk and Assurance Lead to establish and drive our risk and assurance function. This role ensures tech, cyber, data and third-party risks are identified, assessed and managed with practical assurance for the Executive Team and Board.

You will enable innovation, including AI adoption, through risk management frameworks and evidence-based assurance, shaping controls across cloud platforms, SaaS, IAM and resilience. Auckland-based role.