ur promise remains simple: we look after our own. How we deliver on it is evolving.

The Role

Make an enterprise-wide impact in a senior risk role where your expertise will shape how Defence Health identifies, manages and responds to risk. As our Senior Risk Manager, you will help strengthen our Enterprise Risk Management Framework, provide commercially focused advice to leaders and champion a practical, risk-aware culture across the organisation.

Reporting to the Chief of Risk, Compliance & Cyber Resilience, you will play a key role in Defence Health’s second-line risk function. You will lead the ongoing development of enterprise and operational risk practices, risk technology and culture, while supporting oversight of cyber resilience, artificial intelligence risk governance, assurance and internal audit

Key accountabilities

• Lead and continually improve the Enterprise Risk Management Framework, supporting the identification, mitigation and reporting of enterprise risks.
• Provide practical, commercially focused advice and constructive challenge to executives, senior leaders and business stakeholders.
• Lead the second-line risk management function and help embed the three lines model across the organisation.
• Maintain the Enterprise Risk Register and governance, risk and compliance system, ensuring effective monitoring by risk and control owners.
• Support enterprise AI risk governance, cyber resilience risk frameworks and the use of AI in risk management.
• Oversee corporate insurance, including annual renewals, benchmarking, claims and the broker relationship.
• Support operational resilience, assurance, crisis management and the outsourced internal audit program.
• Prepare clear, insightful risk reporting for leadership, executive and Board committees.
• Build risk capability and culture through training, communication, engagement and continuous improvement.

What you’ll bring

• At least 7+ years’ risk management experience.
• A relevant tertiary qualification in risk management, business, law, accounting or a related discipline.
• Experience leading a second-line risk function and developing and maintaining an Enterprise Risk Management Framework and system in an APRA-regulated organisation.
• Proven ability to foster a strong risk culture and influence stakeholders at all levels.
• Excellent organisational, stakeholder management, critical thinking and communication skills.
• Strong business writing and presentation capability, including the ability to communicate with executives, committees and Boards.
• The ability to work autonomously, manage competing priorities and deliver to tight deadlines.
• Experience in artificial intelligence and its application to risk management.
• Risk management experience in private health insurance, financial services or a related APRA-regulated environment (highly regarded)
•