Veranex, Inc. | Line 1 Risk Senior Manager - Technology
Job details
Avant is Australia’s leading medical defence organisation with a proud heritage of protecting Australian medical professionals for over 130 years. Avant now represents 85,000 health practitioners and medical students across every state and territory, delivering market leading products and services to meet their professional, personal and practice needs. Building on this heritage, our vision is to be the most trusted professional partner in supporting doctors throughout their lives and careers. As a mutual organisation, owned by members and run purely for their benefit, our members are at the centre of all we do. As well as providing products and services to our members, we play a broader community role by advocating for improvements in the healthcare system and in quality, safety and professionalism in medicine, through delivering education and research activities. About the role : The Line 1 Risk Senior Manager – Technology division is responsible for leading the team identifying, managing, and mitigating risks associated with Avant’s technology infrastructure, information security, and operations within the IT division. This role ensures that effective risk management practices are integrated into technology strategy and operations, while aligning with Avant’s overall risk management framework. The Line 1 Risk Senior Manager – Technology plays a key role in collaborating with technology and business stakeholders across the Avant Group, to mitigate risks, improve Technology controls, and ensure compliance with relevant regulatory standards. Key requirements :
- Develop and coach team members in relation to the Avant Group Risk Management Framework and IT Risk Management Framework.
- Demonstrate sound understanding of APRA regulations and standards in the Risk Management prudential framework, including CPS234, CPS230, CPS231.
- Work collaboratively across IT Senior Leadership, IT Operations, and within the Line 1 IT risk team, to embed risk management practices into everyday practices, promote a culture of innovation in risk management, embed controls, and monitor / report on issues.
- Prepare and present regular risk reports, dashboards, and updates to senior management and risk committees.
- Work closely with the Avant Group Line 2 team, to ensure consistently effective risk management outcomes, and contribute to the ongoing enhancement of Risk Management practices and outcomes within the Avant Mutual Group.
- Relevant industry / Tertiary qualifications.
- Controls enhancement and automation: Develop a program to simplify and automate the design and operating effectiveness of technology risks and controls, and their compliance with group standards.
- Leadership: Leading and developing the team of Line 1 risk and compliance professionals in embedding operational risk policies and processes within the IT Division.
- Risk Frameworks: Contribute to developing and implementing the Information Technology Risk Management Framework across the business.
- Manage operational risks within the business on a daily basis, including defining risk appetite and tolerances across non-financial risks, develop and maintain technology risk registers.
- Provide comprehensive reporting to Senior Leadership, Executives, boards, and Line 2 risk on the management of Line 1 risks within the technology division.
- Facilitate the Technology Risk committee, stakeholder training and knowledge sharing.
- Significant (6+) years of experience in IT risk and control management, technology audit, or related fields.
- Proven experience leading and guiding a team of risk professionals.
- In-depth knowledge of risk and technology frameworks and methodologies (e.g., ISO 31000, NIST, COBIT, ITIL etc.).
- Proven experience working in a highly regulated industry such as financial services, insurance, or healthcare, with an understanding of how to deliver to APRA regulatory requirements CPS230, CPS231, CPS234 etc.
- Strong understanding of IT systems, networks, information security principles, and cloud technologies.
- Excellent communication skills with the ability to engage and influence technology and business stakeholders at all levels.
- Analytical and problem-solving mindset with a focus on detail and accuracy.
- Proficiency in report writing and presenting risk findings to both technical and non-technical audiences.
Apply safely
To stay safe in your job search, information on common scams and to get free expert advice, we recommend that you visit SAFERjobs, a non-profit, joint industry and law enforcement organization working to combat job scams.