Information Services Governance Manager - DHF Information Services NSW

About Doctors’ Health Fund Doctors’ Health Fund is part of Avant, a member-owned organisation founded by doctors in 1893. Avant supports more than 90,000 medical practitioners and students across Australia through a range of insurance, health, finance, legal and practice management services. Within Doctors’ Health Fund, our Information Services team plays an important role in ensuring our technology environment is effectively governed, well controlled and aligned with our regulatory obligations.

About the role We’re looking for an experienced Information Services Governance Manager to lead governance, risk, assurance and vendor oversight across Information Services.Partnering closely with the Head of Information Services and stakeholders across Doctors’ Health Fund and the wider Avant Group, you’ll provide the frameworks, oversight, monitoring and reporting needed to ensure our technology processes, controls, vendors and portfolio activity are effectively governed and operating as intended.

A key focus of the role will be technology risk, working across Information Services, Risk, Compliance and Cyber Security to maintain a strong governance and control environment. You’ll also play an important role in APRA regulatory alignment, including supporting evidence and obligations relating to CPS 230 and CPS 234, alongside governance of key vendors, MSPs and third-party risk. This is a governance and assurance role rather than an operational technology role.

You’ll provide oversight, challenge gaps, coordinate remediation and help maintain an audit-ready environment while ensuring accountability remains with the appropriate operational owners. Key responsibilities Own and maintain the Information Services governance, risk and compliance framework, including risk registers, control libraries, policies, standards and reporting. Coordinate technology risk activities with operational owners and Risk, Compliance and Cyber Security stakeholders.

Provide Line 1 assurance through control attestations, evidence reviews and checks to ensure controls are implemented and operating effectively. Identify control gaps and exceptions, coordinate remediation and monitor agreed actions through to closure. Own the governance framework for technology vendors and MSPs, covering onboarding, performance, risk reviews, renewals and exit requirements. Manage vendor governance and third-party risk, including SLAs, KPIs, contractual obligations, assurance artefacts, security certifications and remediation.

Coordinate Information Services alignment and evidence for applicable APRA CPS 230 and CPS 234 requirements and other regulatory obligations. Support internal and external audits and maintain an audit-ready governance environment. Partner with Finance, Procurement and Legal on technology contracts, expenditure, commercial governance and vendor arrangements. Provide clear governance, risk, vendor and portfolio reporting to support senior-level decision making.

Key capabilities We’re looking for someone with strong technology governance and risk experience who can work confidently across technical, risk, regulatory and commercial environments.You’ll ideally bring: At least 5 years’ experience across technology governance, risk, assurance, vendor management, portfolio governance or commercial management within a regulated environment. Strong practical experience in technology risk, including risk registers, controls, assurance evidence and remediation.

Strong working knowledge of APRA standards relating to technology, including CPS 230 and CPS 234. Experience working across technology and broader Risk, Compliance and Cyber Security functions to coordinate risk and assurance activities. Demonstrated experience in vendor governance, including MSPs, third-party risk, contracts, SLAs, performance management and remediation. Experience coordinating internal and external audits and control assurance activities.

Strong stakeholder management skills with the ability to influence and drive accountability at senior levels. Strong analytical, financial and written communication skills, including executive and board-ready reporting. Relevant tertiary qualifications in Business, Information Technology, Risk, Finance, Procurement, Legal or equivalent professional experience. Experience within private health insurance or another regulated financial services environment would be beneficial, as would exposure to ITIL, business continuity, ISO 27001, NIST, procurement or contract management.