Head of Information Technology, Information Security and Project Delivery Risk

• Sydney or Melbourne 
• 2nd LOD

Established in 1988, Rest is one of Australia’s largest profit-to-member superannuation funds.

We support more than two million members, with around $100 billion of funds under management and are recognised as a responsible investment leader*. We believe when members understand and engage with their super, they’re more likely to get a better retirement outcome.

Everything we do at Rest is underpinned by our values and behaviours, we want to Be Daring, Keep it Simple, Take Action and Have Grit. To put it simply we want our people to thrive and love the work they do.

The Head of Risk works with the General Manager, Operational Risk & Resilience to design, develop, implement, maintain and monitor Rest’s Enterprise Risk Management Framework (including assurance activities) as it relates to Information Technology, Information Security and Project Delivery risks, demonstrating and embodying a sound risk culture, and meeting Rest’s legislative and regulatory obligations.

• Lead and manage the Information & Transformation Risk Team to develop capability, build a high performing team, foster collaboration, and increase engagement.
• Provide independent and effective challenge to Data, Technology & Delivery (DTD) teams and broader organisation over Rest activities and decisions that may affect Rest’s information & transformation risks, this includes risks associated with information technology, cyber security, project delivery and data.
• Lead the design, implementation and maintenance of appropriate frameworks, processes and capability supporting the management and assurance over information & transformation risks at Rest, aligning to regulatory and legislative obligations, and Rest’s strategic objectives.
• Lead Second Line controls testing, assurance and risk reviews related to DTD teams, Rest’s project portfolio and other broader enterprise business activities as required, to ensure adequate controls are implemented commensurate with risks, vulnerabilities, and threats.
• Prepare and present regular risk reporting to Executive forums and Board/Committees to support delivery of business outcomes.