Head of Information Technology, Information Security and Project Delivery Risk

JobsCloseBy Editorial Insights

Rest is seeking a Head of Information Technology, Information Security and Project Delivery Risk to lead the Second Line of Defence and shape Rest’s Enterprise Risk Management Framework for IT, cyber security and project delivery risks. You will head the Information & Transformation Risk Team, provide independent challenge to Data Technology & Delivery, run second line controls testing and risk reviews, and present risk insights to Executive forums and the Board. The ideal candidate holds CISSP or CISA or equivalent, with senior risk, compliance or audit experience focused on IT and cyber, and a track record with large projects. Knowledge of COBIT, NIST, ISO 27001 and SPS 220 CPS 230 CPS 234 SOCI is valued. Apply by 17 July 2026; tailor your CV to show leadership, measurable risk outcomes, and board-ready papers.

Company Description

Supporting millions of Aussies since 1988 with low fees and competitive long-term performance. Profits back to members, not shareholders

Closing date: 17th July 2026 

Please note Rest does not accept speculative resumes from recruitment agencies 

Rest will review applications prior to the closing date and may close the role earlier

Job Description

• Sydney or Melbourne 
• 2nd LOD

Established in 1988, Rest is one of Australia’s largest profit-to-member superannuation funds.

We support more than two million members, with around $100 billion of funds under management and are recognised as a responsible investment leader*. We believe when members understand and engage with their super, they’re more likely to get a better retirement outcome.

Everything we do at Rest is underpinned by our values and behaviours, we want to Be Daring, Keep it Simple, Take Action and Have Grit. To put it simply we want our people to thrive and love the work they do.

The Head of Risk works with the General Manager, Operational Risk & Resilience to design, develop, implement, maintain and monitor Rest’s Enterprise Risk Management Framework (including assurance activities) as it relates to Information Technology, Information Security and Project Delivery risks, demonstrating and embodying a sound risk culture, and meeting Rest’s legislative and regulatory obligations.

• Lead and manage the Information & Transformation Risk Team to develop capability, build a high performing team, foster collaboration, and increase engagement.
• Provide independent and effective challenge to Data, Technology & Delivery (DTD) teams and broader organisation over Rest activities and decisions that may affect Rest’s information & transformation risks, this includes risks associated with information technology, cyber security, project delivery and data.
• Lead the design, implementation and maintenance of appropriate frameworks, processes and capability supporting the management and assurance over information & transformation risks at Rest, aligning to regulatory and legislative obligations, and Rest’s strategic objectives.
• Lead Second Line controls testing, assurance and risk reviews related to DTD teams, Rest’s project portfolio and other broader enterprise business activities as required, to ensure adequate controls are implemented commensurate with risks, vulnerabilities, and threats.
• Prepare and present regular risk reporting to Executive forums and Board/Committees to support delivery of business outcomes.

Qualifications

• Current certifications relevant to Information Technology or Cyber Security, such as CISSP, CISA or others as relevant (highly desired)  
• Experience in senior risk, compliance or audit roles (primarily focused on Information Technology, Cyber Security and/or Project Delivery)
• Experience leading risk advisory and assurance over large projects and transformation programs
• Technical knowledge of industry best practices and emerging trends in risk management, technology, cyber security, project delivery, and artificial intelligence
• Knowledge of frameworks and standards relevant to risk management, technology, cyber security, project delivery, and artificial intelligence (e.g. COBIT, NIST, ISO 27001, Agile, Voluntary AI Safety Standard)
• Knowledge of the superannuation industry and legislative / regulatory obligations relevant to risk management, technology, and cyber security, including SPS 220, CPS 230, CPS 234, SOCI
• Experience drafting high quality papers for Senior Leaders, Executives, Boards and Committees

Additional Information

Our benefits have been designed so you can tailor your experience with us and include:

• Personal and professional development opportunities 
• Hybrid working 
• Purchase leave scheme and gender neutral 16 weeks paid parental leave 
• Super Contribution Continuation for 12 Months of parental leave 
• Linkedin Learning 
• Income Protection Insurance 
• Rest Excellence awards (peer recognition awards based on Rest’s values and behaviours) 
• Rest Stops - meeting free breaks 

If you share our values, believe you can help make a difference for our members and want to be part of a leading superannuation fund with a Super culture, please click Apply Now.

Rest is committed to creating a flexible work environment and culture that embraces diversity, equity, and inclusion - where people feel welcome, safe to be themselves and inspired to do their best.

We value the different backgrounds, lived experiences and abilities our diverse team brings. We welcome and encourage applications from candidates of all ages, cultural backgrounds, faiths, gender identities, sexual orientations and thinking styles. This includes people with disability, neurodiverse individuals, Aboriginal & Torres Strait Islander peoples and those with disrupted work history due to career or other breaks.

Please note only people with the right to work in Australia will be considered.

*Funds under management as at 31 July 2025. Rest is recognised as a Responsible Investment Leader by the Responsible Investment Association Australia (RIAA) in its Responsible Investment Benchmark Report 2022.