Technology Risk & Controls Specialist

Southern Cross Health Insurance; Auckland; On-site; NZD 90,000 - 120,000; Full time

Job summary

Southern Cross Health Insurance is seeking a Technology Risk Analyst to join the Information & Security team on a fixed-term basis until 30 June 2027. The role focuses on implementing and operating risk management practices across Digital Platforms, partnering with stakeholders to mitigate technology risks and support risk assessments for new vendors.

You will be a self-starter with strong communication skills, able to work independently or in a team, and contribute to policies, controls, and

Qualifications

• 3–5 years’ proven experience in a similar technology risk or assurance role.
• Solid understanding of IT and cyber frameworks and methodologies (e.g. COBIT, NIST, ITIL, ISO 27001, CIS, NZISM).
• Industry certification such as CISA, CRISC or CISSP is advantageous.

Responsibilities

• Performing risk assessments and controls testing across Digital Platforms.
• Ensuring mitigation of top risks with up-to-date risk and issue registers.
• Advising control owners and stakeholders on risk and controls.
• Delivering risk coaching, awareness and monitoring to promote a positive risk culture.
• Reviewing vendors against security, resilience and privacy requirements (ISAE 3402, SOC1, SOC2).
• Collaborating with Procurement and Legal on third‑party risk assessments.
• Contributing to information security policies and standards, and uplift of assurance capability.
• Providing timely reporting to Digital Platforms Leadership Team and governance committees.

Skills

Technology risk

Risk testing

Stakeholder communication

Controls advisory

Vendor risk management

Education

CISA/CRISC/CISSP certification

Relevant tertiary qualification

Tools

COBIT

NIST

ITIL

ISO 27001

CIS

NZISM

Job description

Southern Cross Health Insurance is seeking a Technology Risk Analyst to join the Information & Security team on a fixed-term basis until 30 June 2027. The role focuses on implementing and operating risk management practices across Digital Platforms, partnering with stakeholders to mitigate technology risks and support risk assessments for new vendors.

You will be a self-starter with strong communication skills, able to work independently or in a team, and contribute to policies, controls, and