Chief Risk Officer - Technology

Bendigo Bank; Sydney; Hybrid; AUD 350,000 - 550,000; Full time

Benefits offered by this job

Meaningful Impact

Hybrid work options

Executive development

Staff banking perks

Inclusive culture

Job summary

Bendigo Bank is seeking a Divisional Chief Risk Officer – Technology to lead risk governance for technology, cyber, cloud, data risk and third-party providers. You’ll advise the CTO, CISO and leadership, ensuring rapid tech innovation stays within risk appetite.

This executive role requires broad experience in technology risk, regulatory acumen, and the ability to influence the Board and regulators. Hybrid work options available across Australia.

Qualifications

• Extensive experience leading Technology Risk/InfoSec/IT Audit in a regulated financial services environment.
• Authoritative knowledge of APRA CPS 234 and CPS 230 and related governance regimes.
• Proven track record delivering independent 2LoA risk assurance for large-scale tech modernisations.

Responsibilities

• Shape technology strategies aligned to risk appetite with 2LoA challenge.
• Develop and mature technology and data risk management frameworks.
• Oversee compliance, incident reporting, and remediation driving.
• Engage with Board, regulators, and risk committees with clear risk narratives.
• Lead and develop a high-performing, diverse risk team.

Skills

Technology risk management

Information security

IT audit

APRA CPS 234/CPS 230

Executive communication

Education

Technology/Computer Science/Business/Risk mgmt degree

Postgraduate qualifications

Job description

For over 160 years, Bendigo and Adelaide Bank has stayed true to its purpose: feeding into the prosperity of our customers and communities, not off it. Now, we’re scaling our impact. We are united in our belief that in banking, better can be bigger—and Group Risk sits at the very heart of this journey. We are a forward-looking, data-driven function dedicated to delivering robust risk management outcomes and fostering a proactive risk culture that safeguards the Bank’s enduring success.

About the role

Reporting directly to the Chief Risk Officer as an executive member of the Risk Leadership Team, the Divisional Chief Risk Officer – Technology (as it's known internally) plays a pivotal leadership role in enabling the Bank’s strategic and digital transformation safely and sustainably.

In this high-profile executive capacity, you will provide strategic, independent Second Line of Accountability (2LoA) oversight, advisory, and assurance across technology, cyber security, cloud architecture, digital platforms, data risk, and third-party technology providers. Acting as a trusted strategic advisor and independent challenger to the Chief Technology Officer (CTO), Chief Information Security Officer (CISO), and Technology Leadership Team, you will ensure our rapid pace of technological innovation is balanced with robust, future-ready risk management. This role commands high governance visibility, regularly presenting insights and assurance to the Board, Board Risk Committee, Executive Risk Committee, and Regulators.

What you’ll do

• Strategic 2LoA Advisory & Independent Challenge: Partner with the CTO, CISO, and Executive Leadership to shape technology strategies aligned to the Bank’s risk appetite. Provide robust 2LoA challenge and proactive guidance across core systems changes, digital migrations, cloud adoption, and emerging tech capabilities.
• Technology Risk Assurance & Governance: Develop, operationalise, and mature contemporary technology and data risk management frameworks. Design and execute a comprehensive assurance program evaluating technology controls, cloud security, cyber defences, and critical third-party IT provider arrangements.
• Compliance & Threat Oversight: Provide second-line oversight and challenge of compliance obligations, specifically for APRA Prudential Standards—CPS 234 (Information Security) and CPS 230 (Operational Resilience). Oversee technology incident and breach reporting, ensuring root cause analyses drive meaningful technical remediation.
• Board & Regulatory Engagement: Represent Group Risk and the Bank at Executive Committees, Board forums, and regulatory engagements (APRA/ASIC), translating complex technical architectures and cyber threat vectors into clear, risk-based executive narratives.
• People Leadership & Risk Culture Uplift: Lead, coach, and inspire a high-performing, technically specialised technology risk and compliance team. Champion digital literacy, risk ownership, and our critical behaviours across the enterprise: act commercially, move fast, recognise impact, and actively challenge the status quo.

What you’ll bring

• Deep Technical & Domain Mastery: Extensive experience leading a Technology Risk, Information Security, or IT Audit function within a complex, highly regulated financial services environment.
• Regulatory Acumen: Authoritative knowledge of prudential expectations and standards, specifically APRA CPS 234, APRA CPS 230, and broader technology, data privacy, and cyber governance regimes.
• Transformation & Assurance Oversight: Demonstrated track record providing independent 2LoA risk assurance over large-scale enterprise technology modernisations, core platform transformations, and cloud implementations.
• Executive Gravitas & Strategic Influence: Exceptional communication and relationship-building capabilities, with the credibility to influence C-suite executives and the Board, paired with the courage to deliver constructive, independent challenge.
• Values-Driven People Leadership: Proven capability in attracting, mentoring, and developing diverse, specialised risk talent, fostering a psychological safe, high-performance "Speak Up" culture.
• Qualifications: Tertiary qualifications in Technology, Computer Science, Business, Risk Management, or a related discipline are essential; postgraduate qualifications are highly regarded.
• (Note: This role is designated under APRA Prudential Standard APS 520 (Fit and Proper) and is subject to standard background, probity, and fitness assessments)

Why choose Bendigo Bank?

• Meaningful Impact: Lead a vital risk function where your technology stewardship directly protects millions of Australian customers, their data, and community banking infrastructure.
• Genuine Flexibility: Hybrid working options designed to balance executive leadership and strategic presence with personal wellbeing.
• Continuous Growth & Leadership: Access to targeted executive development programs, executive mentoring, and enterprise-wide learning.
• Competitive Executive Offering: Comprehensive remuneration package, staff banking privileges, private health insurance discounts, and wellness subsidies.
• Inclusive & Purpose-Led Culture: A supportive, collaborative, and values-driven workplace where authentic leadership is celebrated.

We're making better, bigger. And we'll get there with you

Could you be our newest leader? Now’s the time to set your sights high – on the future you and the future career you deserve.

We believe a diverse workforce supported by an inclusive culture is central to our success and we actively encourage applications from those who bring diversity of thought to our business. We support candidate requests for adjustment to accommodate an illness, injury, or disability to equitably participate in the selection process.

Still in two minds?

Research suggests 60% of women and underrepresented groups might stop here, even after getting as far as drafting an application. We believe that diversity makes every team stronger, so even if you don’t tick every box we still want to see your application!