Head of IT, Information Security & Project Delivery Risk

About the role

We are seeking a senior leader to head the Information Technology, Information Security and Project Delivery Risk function for Rest, one of Australia’s largest profit‑to‑member superannuation funds. Reporting to the General Manager, Operational Risk & Resilience, you will shape and oversee the enterprise risk management framework for technology and transformation initiatives.

Key responsibilities

• Design, develop, implement and monitor Rest’s Enterprise Risk Management Framework for IT, cyber security and project delivery risks.
• Lead and develop the Information & Transformation Risk team, building capability and high performance.
• Provide independent challenge to Data, Technology & Delivery teams on risk matters.
• Establish and maintain frameworks, processes and assurance activities aligned with regulatory obligations and strategic objectives.
• Conduct second‑line controls testing, assurance reviews and risk assessments across the project portfolio.
• Prepare and present regular risk reports to executive forums, board committees and senior leadership.

Required profile

• Current certifications relevant to IT or cyber security (e.g., CISSP, CISA) – highly desired.
• Significant experience in senior risk, compliance or audit roles focused on technology, cyber security and/or project delivery.
• Proven track record leading risk advisory and assurance for large transformation programmes.
• Strong technical knowledge of industry best practices and emerging trends in risk management, technology and cyber security.

Required skills

• CISSP
• CISA
• Risk management frameworks
• Cyber security principles
• Project delivery risk assessment