This role exists to perform IT Governance and Compliance across the IT business environment to ensure operational excellence and continue to deliver services that are compliant with regulatory and organisational requirements. The role is responsible for managing IT Audits, Compliance and Line 1 Controls Assurance across all IT services.

Responsibilities:

• Support in implementing the IT governance and compliance processes across IT services
• Perform design and operating effectiveness testing for the defined IT controls
• Conducting control assurance to identify control gaps and recommend solutions
• Contribute to development, review, operationalization of IT processes
• Document the control evaluation process, including the methodology, testing results, and any identified deficiencies. Maintain comprehensive records for audit purposes. 
• Exhibit high attention to details in identifying, aggregating, and communicating issues and control gaps to appropriate stakeholders
• Compile detailed reports on the effectiveness of internal controls, including any identified weaknesses and recommended improvements
• Highlight critical issues and their potential impact on the organization
• Use feedback from reporting to enhance the control evaluation process
• Implement best practices and lessons learned to improve the overall control environment
• Periodic reporting on IT Risk and Control Testing
• Demonstrate understanding of operational risk, control testing methodologies, and related regulatory and compliance standards
• Facilitate IT Audits – review and collation of evidence as required; interaction with audit teams (internal, external)

Essentials:

• Three (3) or more years of solid experience in an IT Risk, Compliance role
• Detailed understanding of governance and risk management
• Proficient in Microsoft tools like SharePoint, Excel, PowerPoint
• Good analytical and problem-solving skills - Can ask effective questions and collect facts from multiple sources in order to solve problems
• Must possess a positive attitude and excellent team player
• Experience in a role balanced between business stakeholders and a central technology service organisation
• Strong understanding of information security controls and ISMS standards such as SOC 2, ISO 27001/2, COBIT, CRISC
• Experience collaborating with multiple stakeholders across functional and technical skill sets
• Education Level: Graduate Degree (e.g. BIT, BSc) or equivalent work experience in Information Technology or an equivalent engineering discipline
• Certifications, such as CISSP, CRISC, CISA, CIPP, CISM, aren’t a prerequisite however are well regarded
•  Must be able to demonstrate strong alignment to HCF Values: “STEP FORWARD, STAY HUMAN, WALK IN THEIR SHOES, MAKE IT BETTER, GET THERE TOGETHER”.
• Ability to instill confidence in the business and demonstrate the business value of IT
• Ability to manage senior stakeholders and build effective relationships across technology & business
• Strong verbal and written communication skills

Culture & Benefits

We’re all about creating a fantastic people experience, guided by our values, so that we can in turn better deliver for our members. We work with our people to create a work experience that is inclusive, supportive, safe and respectful so we can do the best for our members.

• 50% subsidy on HCF Private Health Insurance
• 18 weeks Parental Leave for all genders
• 6 additional leave days to support your wellbeing and medical needs
• Mental Health & Wellbeing programs
• Discounts to pet, life, travel and general insurance
• Come and join our HCF team!

A career with us

Please check out our website at https://www.hcf.com.au/about-us/careers

At HCF, we are dedicated to fostering an inclusive and collaborative work environment that upholds our core values. We look for the human in each other and use that to guide what we do and how we do it. HCF takes pride in our diverse workforce and inclusive workplace culture and we celebrate the richness of perspectives brought by individuals with different backgrounds and experiences, including age, ethnicity, cultural or spiritual background, gender identity, disability, education, and socio-economic status.

All suitably qualified applicants will receive fair and equitable consideration for employment. If you require any adjustments to assist you in making your application or throughout the selection or onboarding process, please reach out to vacancy@hcf.com.au and we will make every effort to assist you.