Testing & Assurance Manager

Blake Oliver Consulting has been engaged to appoint a Testing & Assurance Manager into a regulated Australian insurer, as part of a strengthened Risk & Compliance function. Reporting to the Chief Risk & Compliance Officer, this role will own the design and execution of the organisation’s controls testing and assurance program across the business.

This is not a traditional test role. This is a genuinely broad remit, spanning controls testing, IT and information security assurance aligned to CPS 234 and CPS 230, controls uplift, and remediation oversight. You’ll work directly with business, risk, audit and IT/IS stakeholders to lift the consistency and rigour of how the organisation tests, rates and reports on its controls environment. The mandate leans operational rather than deep technical, so this suits an operational risk professional with adjacent security exposure rather than a dedicated security tester.

Responsibilities

• Design, schedule and implement the organisation’s controls testing program, ensuring every business area is tested at least annually
• Manage and execute the IT and Information Security testing program in alignment with CPS 234 and CPS 230 requirements
• Provide control design advisory support, working with each business to advise on and uplift controls that mitigate and manage risk
• Coordinate the annual controls validation process across all business units
• Partner with business, risk and audit teams to ensure reporting and assurance work is aligned
• Build and lead a Controls Assurance Community of Practice with risk champions across Claims Quality Assurance, IT/IS, Finance and People & Culture
• Report to the Risk & Compliance Forum and Risk & Compliance Committee on control status and risk appetite impact
• Ensure controls, testing outcomes and actions are accurately recorded and updated in the GRC system

Skills & Experience

• 6+ years’ experience in risk, compliance or testing assurance within an APRA regulated entity
• Operational IT and information security risk experience, with exposure to control frameworks such as CPS 234
• Experience within insurance, another APRA-regulated financial services environment, or a comparable regulated sector
• Strong understanding of IT, information security and data management requirements and controls
• Report writing, business analysis and risk based reporting skills
• Qualifications in Business, Audit, CISA or CPA highly regarded

Desirable

• Experience working across the 1st, 2nd and 3rd lines of defence
• Direct, hands-on experience testing IT and security controls specifically against CPS 234

Why Apply?

• Own and shape a critical testing and assurance function inside an established Australian insurer
• A hands-on, sole-contributor remit initially, in an organisation of around 200 people, you'll build and own the function rather than step into one that's already running
• Direct reporting line to the Chief Risk & Compliance Officer, with regular visibility to the Risk & Compliance Committee
• Genuine scope to build a controls assurance community of practice and influence risk culture across the business
• Join a close-knit organisation where you’ll have direct influence and visibility, rather than being one of many in a large enterprise team
• Hybrid working environment, 50/50 WFH once established in the role

Equal Opportunity Employment
Blake Oliver Consulting and our client are equal opportunity employers. We celebrate diversity and are committed to creating an inclusive workplace where all employees feel valued and supported. We encourage applications from people of all backgrounds, including women, Indigenous Australians, people with disabilities, and those from culturally and linguistically diverse backgrounds.