Risk and Assurance Manager

About usCITEC provides Queensland Government departments and associated entities with information, communication and technology services that support the delivery of quality frontline services to Queensland communities and business.
The Enabling Services branch within CITEC leads the architectural design, product and service management, stakeholder engagement, project management, risk management, vendor management and ITSM practice primarily to enable the delivery of CITEC services.
The Assurance and Risk Management team forms part of the Enabling Services and provides a consolidated approach taking in all elements of the assurance framework including quality management, risk management and audit and compliance to support all areas of CITEC.
Key responsibilitiesYou will support CITEC's ability to successfully execute its business by managing quality, audit, risk and related assurance practices for the organisation's ICT services.Some of your responsibilities will include: - Lead and manage a team of risk and assurance staff ensuring a culture of accountability and knowledge sharing
- Develop, implement and manage the Assurance and Risk program, including CITEC's risk management framework and ensure that it is embedded within the organisations policy, procedure and practices. Develop and evolve organisational best practices and continuous improvement by supporting the ongoing compliance to ASAE3402 and CITEC's certification to AS/NZ ISO 9001:2015 and AS/NZ ISO 27001: 2022. Provide expert advice and support to ensure CITEC remains compliant with legislation, policy and best practice standards by developing, implementing and supporting the internal and external audit programs. Develop systems to provide assurance to clients and management that IT controls are implemented for key IT systems across CITEC. Provide management responses and action plans to ensure that audit recommendations are implemented within the agreed target timeframes and that supporting evidence is recorded. Prepare the development of complex risk management submissions and reports, briefing notes, presentations, publications and correspondence for a diverse range of internal and external stakeholders;
- Build and maintain strong business relationships with internal and external stakeholders.
About youWe recognise and celebrate that everyone is unique and seek the applicant best suited to the role. We will assess your experience, knowledge and acquired skills, as well as your potential for development and your personal qualities. To thrive in this role, you will need to demonstrate the following:
Mandatory qualifications and conditions
- Nil.
Requirements of the role
- Extensive experience in developing and maintaining systems, policy and processes in risk and assurance management for an ICT service provider
- Highly developed research skills and the ability to investigate and analyse information from a range of sources to explore new ideas to support best practices and processes. Ability to collaborate with a wide range of stakeholders to deliver effective and sustainable outcomes with the ability to utilise a range of communication tools to influence change. High level of knowledge of legislation, policy and international best practice standards for quality risk and security. High level consultation skills and
- Highly developed leadership and management skills with the ability to coach and mentor others.
Applications to remain current for 12 months.
**Job Ad Reference**: QLD/589665/24
**Closing Date**: Friday, 20 September 2024This work is licensed under a Creative Commons Attribution 3.0 Australia License.