Want to know if this job is worth applying to?
Sydney, New South Wales, Australia
Hybrid
Conduct vendor risk assessments for new and existing suppliers.
Review vendor security controls, assurance reports and supporting evidence.
Identify and document risks, control gaps, recommendations and risk treatment actions.
Prepare clear, audit-ready assessment reports and stakeholder communications.
Partner with Procurement, Cyber Security, Technology and business teams to manage third-party security risks.
Maintain accurate assessment records, evidence and governance documentation.
Support internal and external audits and contribute to continuous improvement of vendor risk processes and reporting.
Escalate significant risks, control concerns and unresolved issues through appropriate governance channels.
Degree qualification in Cyber Security, Information Technology, Risk Management or a related discipline, or equivalent experience.
3+ years' experience in Information Security, Vendor Risk, Technology Risk, IT Audit or Compliance.
Strong understanding of third-party risk management and vendor due diligence.
Knowledge of information security domains including access management, data protection, incident management, vulnerability management, business continuity and security governance.
Familiarity with industry frameworks such as ISO 27001, NIST, SOC 2, COBIT and APRA CPS 234/CPS 230.
Strong analytical skills with the ability to assess risk, identify control gaps and provide practical recommendations.
Excellent stakeholder engagement and communication skills.
About HCF
At HCF, our purpose is to bring our human touch to healthcare. Since 1932 we’ve been putting our members and their health first. As Australia’s largest not-for-profit health fund, we cover 2 million members with health, life, travel and pet insurance and our vision is to make healthcare understandable, affordable, high quality and member centric.
We want to be true health partners to our members, easily guiding the healthcare choices that are right for them. At HCF, our values are the way we do things and create the necessary culture to help us realise our purpose and deliver our Strategy. Living our values in action we step forward, walk in their shoes, stay human, make it better and get there together.
Culture & Benefits
Purpose-driven passion
We’re united by a common purpose: to make healthcare affordable, understandable, high quality and member-focused.
Wellness and work-life balance
We’ll empower you with the necessary skills and tools to support your personal wellbeing journey, ensuring you perform at your best. Our offerings include:
Flexible working arrangements
50% subsidy on HCF hospital and/or extras cover
Family-friendly certified employer
18 weeks of parental leave for all new parents
Mental health and wellbeing programs, including workshops, fitness classes, flu vaccinations, skin checks and more
Discounts on HCF’s products, including life, pet and travel Insurance, as well as discounts at Fitness First gyms and on our eyecare products.
Collaboration and inclusivity
We embrace diversity as our strength and are committed to maintaining an inclusive and collaborative work environment. Our workplace is welcoming and safe for all our employees, irrespective of their unique characteristics including age, ethnicity, cultural or spiritual background, gender identity, disability, education and socio-economic status.
Continuous learning and growth
We believe in lifelong learning. HCF provides opportunities for personal and professional development. From workshops to mentorship programs, we encourage your growth and curiosity.
Next steps
If you require any adjustments to assist you in making your application or during the recruitment or onboarding process, please reach out to Talent Acquisition – peopleservices@hcf.com.au to discuss.
We encourage applicants to submit their applications at their earliest convenience, as at HCF, we review applications as they are submitted, and may have filled the role prior to the job closing date.