Manager, Technology, Cyber And Data Risk

Colonial First State; Sydney; Hybrid; AUD 120,000 - 160,000; Full time

Job summary

Colonial First State is seeking a Manager, Technology, Cyber and Data Risk to lead risk reviews, assurance activities and thematic assessments across Technology, Cyber and Data domains. Hybrid Sydney role.

You will partner with stakeholders in Technology, Operations and Compliance to strengthen risk management, provide guidance, and drive remediation of findings in a regulated financial services environment. This is a 12-month maximum term contract located in Sydney CBD.

Qualifications

• Experience in technology, cyber or operational risk within a regulated environment.
• Experience assessing control design and IT General Controls (ITGCs).
• Knowledge of risk frameworks, governance, and incident management.
• Ability to translate technical risk into business actions.
• Manager-level experience leading reviews and stakeholder engagement.
• Experience in superannuation, wealth management, banking, insurance or financial services.
• Knowledge of APRA requirements and frameworks (NIST, ISO 27001, COBIT, CISA or ITIL).
• Exposure to cloud, cyber security, third-party risk, resilience, or AI transformations.
• Relevant qualification or certification in risk, technology, cyber security or audit.

Responsibilities

• Partner with stakeholders to identify, assess, manage and report technology, cyber and data risks across business-as-usual operations, change initiatives and transformation programs.
• Support and review risk assessments, control assessments, control design, risk acceptances and treatment plans, focusing on risk ownership, evidence and effectiveness.
• Lead and support control assurance and testing activities, including assessment of IT General Controls (ITGCs) and key technology, cyber and data controls, evaluating control design, operating effectiveness and remediation outcomes.
• Monitor risk appetite measures, key risk indicators, control performance, incidents and emerging risks, escalating material concerns where appropriate.
• Provide risk input to technology change, cloud, cyber security, data, supplier, resilience and AI initiatives, supporting effective risk-based decision making.
• Support issue management and remediation activities, including validation of actions, evidence and closure outcomes.
• Coordinate and support responses to assurance reviews, internal audit, external reviews and regulatory requests, and assist with remediation of findings.
• Conduct targeted and thematic reviews to identify control weaknesses, emerging risks and opportunities for improvement.
• Support the ongoing development and practical application of risk frameworks, policies, standards and controls.
• Build risk capability across stakeholders through coaching, advice and collaboration.

Skills

Technology risk

Cyber risk

Risk management

Stakeholder management

Communication

Leadership

Education

Relevant certification in risk/cybersecurity

Job description

Are you ready to be part of an organisation that values expertise, passion and diversity? At CFS we know that the foundation of our success lies in our exceptional people. We believe in celebrating individuality, have a passion for high performance and creating an environment where you can unleash your full potential. Our people enable us to make a difference and deliver exceptional experiences to help our customers achieve financial freedom.

Your Team

The Manager, Technology, Cyber and Data Risk supports the delivery of risk reviews, assurance activities and thematic assessments across CFS. Working closely with Technology, Cyber, Data, Operations and Transformation teams, the role helps strengthen risk management practices and control effectiveness. The position provides guidance to stakeholders, contributes to risk initiatives, and partners with key risk, compliance, audit and supplier management teams to drive strong risk outcomes.

This is a 12-month maximum term contract, Sydney CBD (Hybrid).

Your Responsibilities

• Partner with stakeholders to identify, assess, manage and report technology, cyber and data risks across business-as-usual operations, change initiatives and transformation programs.
• Support and review risk assessments, control assessments, control design, risk acceptances and treatment plans, focusing on risk ownership, evidence and effectiveness.
• Lead and support control assurance and testing activities, including assessment of IT General Controls (ITGCs) and key technology, cyber and data controls, evaluating control design, operating effectiveness and remediation outcomes.
• Monitor risk appetite measures, key risk indicators, control performance, incidents and emerging risks, escalating material concerns where appropriate.
• Provide risk input to technology change, cloud, cyber security, data, supplier, resilience and AI initiatives, supporting effective risk-based decision making.
• Support issue management and remediation activities, including validation of actions, evidence and closure outcomes.
• Coordinate and support responses to assurance reviews, internal audit, external reviews and regulatory requests, and assist with remediation of findings.
• Conduct targeted and thematic reviews to identify control weaknesses, emerging risks and opportunities for improvement.
• Support the ongoing development and practical application of risk frameworks, policies, standards and controls.
• Build risk capability across stakeholders through coaching, advice and collaboration.

Your Capability and Experience

Strong experience in technology, cyber or operational risk, controls assurance, internal audit or risk consulting within a regulated environment.

Experience assessing control design, effectiveness, remediation activities and IT General Controls (ITGCs).

Strong understanding of risk frameworks, governance, issue management, incidents, assurance and risk assessments.

Ability to translate complex technical and risk issues into clear business outcomes and actions.

Experience applying Risk in Change (RiC) principles and partnering with stakeholders on project risk impacts.

Strong stakeholder management, communication and influencing skills.

Manager-level experience, or significant Senior Consultant experience leading reviews, assurance activities and stakeholder engagement.

Experience in superannuation, wealth management, banking, insurance or financial services.

Knowledge of APRA requirements and frameworks such as NIST, ISO 27001, COBIT, CISA or ITIL.

Exposure to cloud, cyber security, third-party risk, resilience, data governance, AI or major technology transformations.

Relevant qualification or certification in risk, technology, cyber security or audit.

What to Expect

At CFS, you'll be working among the very best in the wealth management industry. It's an inspiring environment that encourages development and celebrates success.

CFS Culture

At CFS we are committed to creating a thriving environment where individuals can flourish. We believe that success is built upon strong teams, and we are dedicated to celebrating uniqueness, championing individuality and supporting a diverse and inclusive workforce. We believe that when you can truly be yourself, you can unlock your full potential.

Apply today and join us in helping Australians to achieve their financial freedom.

Please note, CFS requires all candidates to have full work rights in Australia.

Where we have preferred candidates, background checks (including Police, Employment, Bankruptcy checks, ASIC banned and disqualified persons) will be completed prior to the final preferred candidate’s employment being confirmed. The outcomes of the background checks do not preclude the preferred candidate, however, they will be assessed against the inherent requirements of the role.

This role is based on Gadigal Land (Sydney).

Manager, Technology, Cyber and Data Risk • Sydney, NSW, AU