Head of Risk – IT, Information Security & Project Delivery

About the role

Rest, one of Australia’s largest profit‑to‑member superannuation funds, is seeking a senior leader to own and evolve its Enterprise Risk Management framework for Information Technology, Information Security and Project Delivery. Reporting to the General Manager, Operational Risk & Resilience, you will shape risk culture and ensure regulatory compliance across the organisation.

Key responsibilities

• Design, develop, implement and monitor the Enterprise Risk Management framework for IT, cyber security and project delivery.
• Lead the Information & Transformation Risk Team, building capability and fostering high performance.
• Provide independent challenge to Data, Technology & Delivery teams on risk matters.
• Oversee second‑line controls testing, assurance and risk reviews for large projects and transformation programmes.
• Prepare and present regular risk reports to executive forums, board committees and senior leadership.

Required profile

• Current certifications relevant to IT or cyber security (e.g., CISSP, CISA) – highly desired.
• Extensive experience in senior risk, compliance or audit roles focused on technology, cyber security and/or project delivery.
• Proven track record leading risk advisory and assurance for large‑scale transformation programmes.
• Strong technical knowledge of industry best practices and emerging trends in risk management, technology and cyber security.

Required skills

• CISSP
• CISA
• Risk management
• Cyber security
• Project delivery

What we offer

• Opportunity to influence risk strategy at a leading superannuation fund.
• Collaborative culture built on daring, simplicity, action and grit.
• Competitive benefits supporting work‑life balance.