Senior Risk and Controls Specialist - Data Governance

at  Bupa

Bupa’s strategic goal is to become the most customer-centric digital healthcare organisation, with the use of data as an explicit pillar of this strategy. Information Management at Bupa is responsible for ensuring that the use of data is compliant with relevant legislations and mandates; is used in ways that align with socially acceptable norms; and creates clear and transparent lines of accountability for facets of data and analytic lifecycles.
Working within the Information Management team, the Senior Risk and Control Specialist-Data Governance will be responsible for ensuring Bupa is well positioned to support state and federal regulatory compliance obligations as well as to ensure compliance with Bupa APAC’s internal enterprise and local Standards.
This role is being offered on an initial full-time 12-month fixed term contract with hybrid, flexible working arrangements - onsite at the Bupa office in Melbourne when you aren’t working from home.

WHAT DO I NEED?

We’re seeking a skilled professional proficient in data governance, risk, and compliance management. Ideal candidates will hold certifications in Compliance and Risk Management, along with extensive practical experience.
You will be adept at developing and implementing robust data governance controls, possess strong technical knowledge, and effectively communicate complex technical issues to non-technical stakeholders. Familiarity with data-related legislation and regulations, such as the Privacy Act 1988, APRA CPS 234, and APRA CPG 235, is essential.
If you are independent, initiative-driven, detail-oriented, and committed to quality documentation and continuous improvement, we encourage you to apply. A collaborative approach and excellent interpersonal and communication skills are key to succeeding in this role.

• Design, develop, and implement effective controls to support implementation of local and enterprise Data Governance Standards, including but not limited to data masking, metadata management, data lineage, data retention, and Data Quality and Reconciliation, etc.
• Regularly monitor control operations and assess effectiveness of controls.
• Operating controls, where identified by the Standard owner as the control operator.
• Supporting compliance activities, such as control self-assessments, provision of /coordination of information to support internal and external audit activities and tracking of management action plans.
• Be an advocate for a robust and transparent risk culture and lead by example.
• Supporting Data Governance Risk and Issue Management, including the maintenance of relevant register, development of, and support reporting activities