Technology Risk Analyst/specialist

**Bring your authentic and passionate self to this exceptional role #careerswithimpact**

Are you a tech-savvy risk professional who thrives on driving real impact? Join HESTA’s technology team where your expertise will support meaningful change for our members. Reporting to the Manager, Technology Risk, you’ll play a key role in supporting the technology and broader operations function in ensuring systems, processes and practices comply with relevant frameworks, policies, guidelines and regulatory requirements. You’ll provide guidance on how to effectively identify and mitigate risk, conduct assessments, data analysis, reporting, insights and support technology teams to implement uplift in an agile environment.

**What You’ll Do**

**Risk Analysis**
- Identify and assess potential risks and issues related to technology delivery and operations across the enterprise.
- Identify and document gaps, providing recommendations for remediation and assist in the preparation of risk treatment plans.
- Provide advice on technology controls to support adherence to relevant policies and regulatory requirements.

**Risk Monitoring & Reporting**
- Prepare risk reports and documentation for internal and external stakeholders.
- Monitor and report on risk indicators, controls, incidents and treatment plans.

**Stakeholder Management**
- Work closely with cross-functional teams including Compliance, Enterprise Risk, Information Security and Regulatory Change and Engagement.
- Act as the SME trusted advisor on technology risk matters, providing guidance and support to internal stakeholders.

**What You’ll Bring**
- Proven experience in technology risk or operations (service management), ideally in superannuation or financial services.
- Experience in conducting assurance to assess an organisation's adherence to security policies and regulatory requirements.
- Experience collaborating with key stakeholders to identify, support and alert on technology risk issues, incidents and vulnerabilities.
- Knowledge of regulatory frameworks related to risk and information security (e.g., CPS234, CPS230, CPS220)
- Understanding of technology operational processes and general technology concepts, protocols, principles and best practices
- Understanding of information technology and security best practice standards and guidelines (e.g., COBIT, ITIL, ISO 27001, NIST)
- Knowledge of cloud platforms (e.g., AWS, Azure) and third-party risk management.
- Ability to simplify and communicate complex risk concepts to technical and non-technical audiences.
- Strong stakeholder relationship and third partner management skills.
- Skilled in tools like Power BI, and familiar with Agile ways of working.
- A curious, analytical mindset and a drive to improve and innovate.
- Tertiary qualifications in technology, data, risk and compliance or related discipline.
- Certifications in ITIL, COBIT, CRISC, CISM will be advantageous.

**Benefits that matter and make a difference for our employees**
- **_Leave for those moments that matter_**, an additional 6 days of leave at the end of year, up to 6 days paid volunteer leave, gender neutral paid parental leave of 20 weeks, Gender Affirmation leave, reproductive health and wellbeing leave, Cultural and Ceremonial leave. Access your LSL after 3 years, take AL at half pay, and purchase up to 2 weeks additional leave (just to name a few).
- **_Your professional development matters_**, up to $5k per year professional development and up to 8 days professional development leave, HESTA scholarships and free access to a range of premium learning tools.
- **_Your health and wellbeing matters_**, free annual flu shots and skin checks, incredible social events throughout the year and a comprehensive employee assistance program available 24/7.
- **_Your financial wellbeing matters_**, up to 15% super, financial planning support, end of year payment for all Enterprise Agreement-covered employees, incentivised Employee Referral Program and novated lease options.

Please note: Applications via recruitment agencies will not be accepted for this position.