Squad Lead - Enterprise Risk & Governance

The Opportunity – Head of Enterprise Risk Governance & Reporting 

This senior leadership role is accountable for Medibank’s enterprise risk governance arrangements, helping to ensure our risk frameworks, policies, reporting and governance practices remain clear, disciplined and aligned with regulatory expectations. 

You will lead the development, maintenance and ongoing uplift of key enterprise risk documents, including the Risk Management Strategy, Risk Management Framework and Risk Appetite Statement, while overseeing policy governance, enterprise risk committees and risk reporting. 

Working closely with the senior leaders, you will provide strategic guidance, constructive challenge and clear risk insights that support effective oversight and informed decision-making across Medibank. 

This role also acts as the Integrated Squad Lead for the Enterprise Risk and Governance Stream of the Integrated Uplift Program (IUP), Medibank's largest Risk Uplift Program. 

How you will create value 

In this broad and influential role, you will add value by: 

• Owning and maintaining Medibank’s enterprise risk governance arrangements and core risk documents, ensuring they remain current, coherent and aligned with our strategy, risk profile and regulatory obligations. 

• Leading policy governance, including document hierarchies, approval pathways, review cycles, exceptions and oversight reporting. 

• Managing the governance and operating rhythm of enterprise risk committees, including agendas, papers, decisions, records and action tracking. 

• Coordinating clear, timely and decision-focused enterprise risk reporting for management, executive and Board audiences. 

• Leading governance and coordination of CPS 220 obligations and the annual Risk Management Declaration process. 

• Providing enterprise-level thought leadership and constructive challenge to strengthen risk management practices and governance outcomes. 

• Leading integrated, cross-functional risk transformation and uplift activities, ensuring outcomes transition effectively into sustainable business-as-usual arrangements. 

About you 

You are an experienced enterprise risk leader who combines strong strategic thinking, regulatory knowledge and commercial acumen with a collaborative and pragmatic approach. You can navigate complex stakeholder environments, translate regulatory requirements into practical outcomes and communicate confidently with senior and Board-level audiences. 

Key attributes and experience include: 

• 10+ years’ experience in enterprise risk management, risk governance, policy or framework development within financial services or another large, regulated organisation. 

• Demonstrated experience owning enterprise risk frameworks, strategies and risk appetite arrangements. 

• Strong understanding of APRA prudential requirements, and experience coordinating regulatory governance and uplift activities. 

• Experience leading enterprise policy governance, senior risk committees and executive or Board reporting. 

• Strong influencing and stakeholder management capability, with sound judgement and the credibility to work across senior leadership groups. 

• Proven people leadership experience, including setting direction, building accountability, coaching others and leading high-quality delivery.