Manager - Technology Controls Assurance

About the role

The Manager – Technology Controls Assurance is part of Hostplus' second line of defence, providing oversight and assurance over technology and cyber risk management. You will work closely with business units to ensure that technology and cyber controls are designed, tested and operating effectively, supporting compliance with APRA prudential standards.

Key responsibilities

• Manage and conduct assurance reviews of internal technology and cyber controls, including vulnerability management, incident response, identity and access management, and third‑party service provider oversight.
• Provide recommendations and specialist guidance to control owners and agree on tangible actions to strengthen the control environment.
• Collaborate with 1st Line, Risk, Compliance, Legal, Governance and 3rd Line teams to align assurance activities with Hostplus’ Risk Management Framework.
• Support the Head of Risk and Compliance Frameworks in preparing submissions for the Audit Committee, Risk & Compliance Committee and Board.
• Assist Risk, Compliance, Legal and Governance teams in analysing matters impacting the fund.
• Provide people leadership and guidance to the Risk & Compliance Frameworks & Assurance team, reviewing reports and activities.
• Contribute to raising Hostplus’ overall risk maturity, culture and control environment.

Required profile

• Tertiary qualification in information technology or equivalent experience.
• 3–5 years of experience in technology and cyber risk advisory, controls assurance or risk reviews.
• Experience in the superannuation or broader financial services sector is beneficial.
• Advanced knowledge of investigative techniques, root‑cause analysis, systems analysis and testing.

Required skills

• CPS 234 compliance
• General Information Technology Controls (GITC) assurance
• Vulnerability management
• Incident response
• Identity and access management
• Third‑party service provider oversight
• Systems analysis
• Testing
• Investigative techniques
• Root‑cause analysis