Head of Technology Risk and Controls

Beyond-Bank-Australia; Melbourne; On-site; AUD 180,000 - 280,000; Full time

Benefits offered by this job

3 paid work-life balance days

Volunteer days

Employee discounts

Flexible working environment

Career development opportunities

Job summary

Beyond Bank, a 100% member-owned, certified B Corp bank, is seeking an experienced leader to mature its Technology Risk & Controls capability. You will partner with executives across Technology, Risk and Audit to strengthen cyber resilience, manage risks and enable secure innovation in an AI-enabled landscape.

As the accountable first-line leader for technology risk, you will establish governance, translate regulatory obligations into practical controls, and cultivate a strong risk culture

Qualifications

• Strong experience in technology risk and controls within financial services or regulated environments.
• Practical knowledge of APRA CPS 230 and CPS 234.
• Ability to translate regulatory obligations into practical controls and risk policies.
• Proven track record building a healthy risk culture with clear accountability and ownership.
• Excellent communication with technology leaders, risk, and senior leadership.

Responsibilities

• Lead and mature Beyond Bank's first-line Technology Risk & Controls capability with clear governance.
• Develop end-to-end technology risk view across the lifecycle—from strategy to retirement.
• Translate regulatory obligations into practical policies, standards and controls; monitor and improve controls.
• Foster a proactive risk culture with early escalation and accountability among technology teams.
• Partner with Risk, Compliance, Legal, Internal Audit and external assurance to deliver effective risk outcomes.
• Provide trusted risk guidance to executives, Boards and governance forums on technology risk and resilience.
• Lead and develop the Technology Risk & Controls team and extend capabilities across Technology.

Skills

Technology risk

Governance

APRA CPS 230

APRA CPS 234

Stakeholder comms

Job description

• You can work from any of our corporate offices in Adelaide, Melbourne or Sydney
• Full time opportunity (75 hours per fortnight)

At Beyond Bank, we ask Australians to Bank on Purpose.

We’re a 100% member-owned, certified B Corp bank that helps people reach their financial goals while backing communities across Australia. Because we believe where you bank can make a difference to your financial future and the people and communities around you.

For our people, that means the chance to build a career somewhere that stands for something. You’ll do meaningful work alongside people who care about what they do, with the support and opportunities to learn, grow and move forward.
Our values of Member Obsession, Empowering Communities, Shared Ambition and Championing Sustainability are integral to all that we do and are the standards to which we hold ourselves. The way we work is also demonstrated by the behaviours that we are accountable to uphold: Own It, Call it Out, Be Respectful, Bring Your A Game, Make A Difference and Right Things Right Way.

Job Description

The role

This is a rare opportunity to lead and mature Beyond Bank's Technology Risk and Controls capability, shaping the security, resilience and governance of our technology environment. As the accountable first-line leader for technology risk and controls, you will partner closely with executives across Technology, Risk and Audit to strengthen cyber resilience, manage emerging risks and enable innovation with confidence. Your leadership will help ensure Beyond Bank remains secure, trusted and future-ready in an increasingly complex and AI-enabled landscape.

In this role, you will

• Lead and mature Beyond Bank's first-line Technology Risk & Controls capability, establishing clear accountability, governance and sustainable ways of working across the Technology function.
• Develop and maintain an end-to-end view of technology risk across the technology lifecycle, from strategy and architecture through delivery, operations, resilience, supplier management and technology retirement.
• Translate regulatory obligations, policy requirements and risk appetite into practical technology policies, standards and controls, while strengthening control effectiveness through monitoring, testing, issue management and continuous improvement.
• Build a strong technology risk culture, embedding risk thinking into architecture, investment, delivery and operational decisions, and fostering constructive challenge, early escalation and ownership by technology leaders and teams.
• Partner closely with Risk, Compliance, Legal, Internal Audit and external assurance providers to deliver effective risk outcomes while maintaining clear first-line accountability.
• Provide trusted advice and insight to executives, Boards and governance forums on technology risk, controls, resilience and emerging technology risks.
• Lead and develop the Technology Risk & Controls team while building risk and controls capability across the broader Technology function.

Qualifications

About you

You’re an experienced technology risk leader who combines sound judgement with curiosity and pragmatism. You can work confidently with senior leaders and Boards, while being equally comfortable working alongside technology teams to understand how risk and controls operate in practice.

What’s important to us:

• Strong experience in technology risk and controls within financial services or another highly regulated environment, with practical knowledge of APRA CPS 230 and CPS 234.
• The ability to think about risk across the whole technology lifecycle, not just through a cyber security lens.
• Experience translating regulatory obligations and risk appetite into practical controls and ways of working, with a good understanding of first-line ownership.
• A track record of building a healthy risk culture, with clear accountability, constructive challenge, early escalation and genuine ownership of risk by technology leaders and teams.
• The ability to communicate complex technology risk clearly and build trusted relationships across Technology, Risk and senior leadership.

You don’t need to tick every box or have followed a particular career path. If you bring strong technology risk leadership, good judgement and much of what we’re looking for, we’d encourage you to apply.

Additional Information

See yourself in our team

You will be joining a dynamic IT team where we provide exceptional technical support to our internal users. You will be the first point of contact for our technology issues and will play a crucial role in supporting our user experiences with our technology systems. In our team, you will have opportunities to work closely with and learn from different technology teams to resolve more complex issues. Join us if you're passionate about demystifying technology to delight our Beyond Bank users!

Why work for Beyond Bank?

We welcome candidates who reflect the diversity of the communities in which we operate. We actively encourage Aboriginal and Torres Strait Islander peoples, people living with disability, LGBTQIA+ as well as culturally diverse community members to apply for our roles.
Beyond Bank is committed to creating an accessible recruitment process and employment experience. If you identify as a person living with disability and require adjustments to our online application, recruitment, selection and/or assessment process, or modifications for accessibility to our locations, please contact us at [e-mail]

There are even more benefits:

• Additional 3 paid work-life balance days
• Paid community volunteer days to support community organisations across Australia
• Access to employee discounts, health and wellbeing initiatives, employee and family assistance, plus more
• A flexible and diverse working environment
• Career development opportunities, training and coaching

By joining Beyond Bank, you will have the opportunity to work alongside talented professionals who will support and encourage you to achieve your full potential. If you are passionate about people and want to make a difference, we would love to hear from you.

What does our recruitment process look like?
The process can include a phone screen, video screen, virtual or face-to-face interview, psychometric testing, and all relevant background checking. Some positions may require undergoing 4 weeks of mandatory full training.

To find out more about Beyond Bank visit beyondbank.com.au

As a Certified B Corp, we use our business as a force for good.

We kindly request that recruitment agencies do not contact us regarding this vacancy. We are managing this recruitment process internally and do not require agency support at this time.