Identity & Access Management (IAM) Governance Lead
HESTA Super Fund · Melbourne VIC ·
- Work mode
- Onsite
- Seniority
- Lead
- Category
- Security
- Experience
- 3+ years
Bring your authentic and passionate self to this exceptional role #careerswithimpact
Join HESTA’s growing Information Security - Identity & Access Management team and play a critical role in identifying, assessing and reducing IAM risks across our systems, applications and networks. As IAM Governance Lead, you’ll report to the IAM Manager and partner with business and technology teams to identify control gaps, develop practical remediation strategies and drive risks through to resolution.
What You’ll Do
- Lead IAM control assurance and risk assessments across applications, infrastructure and systems.
- Identify, assess and prioritise IAM risks and control gaps using a risk-based approach.
- Develop and oversee practical remediation strategies, working closely with technology teams to resolve issues.
- Provide insights into the IAM strategy and roadmap, helping prioritise initiatives that reduce risk and strengthen controls.
- Monitor and report on IAM risks, remediation progress, trends and risk reduction to leadership.
- Partner with Information Security Risk & Assurance to manage formal risk processes.
- Contribute to the development and continuous improvement of IAM standards, controls and assurance practices.
- Stay ahead of emerging cyber threats, vulnerabilities and industry best practice.
What You’ll Bring
- Extensive experience in a similar Information Security/Identity & Access Management (IAM) Governance roles, preferably within superannuation or financial services.
- 5+ years’ experience in IAM control design, implementation, assurance and risk analysis.
- Experience identifying, triaging and managing security risks and vulnerabilities through to remediation.
- Understanding of cloud security principles across IaaS, PaaS and SaaS environments.
- Exposure to application security and technologies including IAM, data loss prevention, encryption and key management.
- Excellent communication, stakeholder engagement and influencing skills.
- Strong analytical and problem-solving skills, with the ability to translate complex security risks into clear, practical actions.
- Relevant qualifications and CISSP, CRISC or CISM certifications will be highly regarded.
Bring your IAM Governance expertise | Solve complex IAM challenges and continue to grow your career at HESTA – Apply Now
Benefits that matter and make a difference for our employees
- Leave for those moments that matter, an additional 6 days of leave at the end of year, up to 6 days paid volunteer leave, gender neutral paid parental leave of 20 weeks, Gender Affirmation leave, reproductive health and wellbeing leave, Cultural and Ceremonial leave. Access your LSL after 3 years, take AL at half pay, and purchase up to 2 weeks additional leave (just to name a few).
- Your professional development matters, up to $5,000 per year professional development and up to 8 days professional development leave, HESTA scholarships and free access to a range of premium learning tools.
- Your health and wellbeing matters, free annual flu shots and skin checks, incredible social events throughout the year and a comprehensive employee assistance program available 24/7.
- Your financial wellbeing matters, up to 15% super, financial planning support, end of year payment for all Enterprise Agreement-covered employees, incentivised Employee Referral Program and novated lease options.
We celebrate, value and include people of all backgrounds, genders, identities, cultures and abilities. We welcome and support applications from First Nations people, physically, neuro or culturally diverse, LGBTQI+, and people of any age. We are proud to be WGEA accredited as an Employer of Choice for Gender Equity.
We want all candidates to feel safe, included and provided with the best opportunity to thrive, if you require reasonable adjustments during your application or throughout the recruitment process, please reach out to a member of the Talent team [email protected] and we’ll call you to discuss.
Please note: Applications via recruitment agencies will not be accepted for this position.