Technology Risk & Controls Specialist

Southern Cross Health Insurance; Auckland; On-site; NZD 90,000 - 120,000; Full time

Job summary

Southern Cross Health Insurance is seeking a Technology Risk Analyst to join our Information & Security team on a fixed-term basis until 30 June 2027, based at our Auckland office. You will support risk management across Digital Platforms, assess controls, and perform vendor risk assessments to safeguard our technology environment.

You'll collaborate with stakeholders, provide risk advice, and contribute to policies and governance reporting, helping mature our control environment and assurance

Qualifications

• 3–5 years proven experience in a technology risk or assurance role.
• Solid understanding of IT and cyber frameworks and methodologies (e.g. COBIT, NIST, ITIL, ISO 27001, CIS, NZISM).
• Industry certification such as CISA, CRISC or CISSP is advantageous.
• Relevant tertiary qualification in a technology-related discipline is beneficial.

Responsibilities

• Performing risk and control testing across Digital Platforms to identify and mitigate technology risks.
• Ensuring top risks have mitigants and risk/issue registers are up to date.
• Advising on technology risk with control owners and stakeholders across Digital Platforms and wider business.
• Delivering risk coaching, awareness, and monitoring to foster a positive risk culture.
• Reviewing vendors against security, resilience and privacy requirements, including ISAE 3402, SOC1, SOC2 reports.
• Collaborating with Procurement and Legal on vendor risk assessments.
• Contributing to information security policies, standards, and guidelines, and supporting uplift of risk practices.
• Providing timely reporting to Digital Platforms Leadership Team and governance committees.

Skills

Technology risk

Vendor risk engagement

Stakeholder engagement

Communication skills

Education

CISA/CRISC/CISSP certification

Tools

COBIT

NIST

ITIL

ISO 27001

CIS

NZISM

Job description

Southern Cross Health Insurance is seeking a Technology Risk Analyst to join our Information & Security team on a fixed-term basis until 30 June 2027, based at our Auckland office. You will support risk management across Digital Platforms, assess controls, and perform vendor risk assessments to safeguard our technology environment.

You'll collaborate with stakeholders, provide risk advice, and contribute to policies and governance reporting, helping mature our control environment and assurance