Manager, Technology, Cyber and Data Risk

CFS; Sydney; Hybrid; AUD 150,000 - 190,000; Full time

Benefits offered by this job

Hybrid work arrangement

Job summary

CFS is hiring a Manager, Technology, Cyber and Data Risk to drive risk reviews and assurance activities across Technology, Cyber and Data domains in a Sydney-based, hybrid environment.

You will partner with Technology, Operations and Risk teams to strengthen control effectiveness, lead assurance work and support regulatory responses in a fast-paced wealth management setting.

Qualifications

• Strong experience in technology, cyber or operational risk within a regulated environment.
• Experience assessing control design and IT General Controls (ITGCs).
• Ability to translate complex technical risk issues into clear business actions.
• Experience partnering with stakeholders on risk impacts and RiC principles.

Responsibilities

• Partner with stakeholders to identify, assess, manage and report technology, cyber and data risks across BAU, change and transformation programs.
• Support and review risk assessments, control assessments, design and remediation outcomes.
• Lead control assurance and testing, including ITGCs and key technology controls.
• Monitor risk indicators, incidents and emerging risks; escalate material concerns.
• Coordinate responses to assurance reviews, audits and regulatory requests; assist remediation.

Skills

Technology risk

Cyber risk

Stakeholder management

Risk assessments

ITGCs

Regulatory compliance

Education

Bachelor's degree in risk/IT/compsci

Professional certification in risk/audit (e.g., CISSP/CISA)

Tools

NIST

ISO 27001

COBIT

APRA frameworks

ITIL

Job description

Manager, Technology, Cyber and Data Risk

Are you ready to be part of an organisation that values expertise, passion and diversity? At CFS we know that the foundation of our success lies in our exceptional people. We believe in celebrating individuality, have a passion for high performance and creating an environment where you can unleash your full potential. Our people enable us to make a difference and deliver exceptional experiences to help our customers achieve financial freedom.

Your Team

The Manager, Technology, Cyber and Data Risk supports the delivery of risk reviews, assurance activities and thematic assessments across CFS. Working closely with Technology, Cyber, Data, Operations and Transformation teams, the role helps strengthen risk management practices and control effectiveness. The position provides guidance to stakeholders, contributes to risk initiatives, and partners with key risk, compliance, audit and supplier management teams to drive strong risk outcomes.

This is a 12-month maximum term contract, Sydney CBD (Hybrid).

Your Responsibilities

• Partner with stakeholders to identify, assess, manage and report technology, cyber and data risks across business-as-usual operations, change initiatives and transformation programs.
• Support and review risk assessments, control assessments, control design, risk acceptances and treatment plans, focusing on risk ownership, evidence and effectiveness.
• Lead and support control assurance and testing activities, including assessment of IT General Controls (ITGCs) and key technology, cyber and data controls, evaluating control design, operating effectiveness and remediation outcomes.
• Monitor risk appetite measures, key risk indicators, control performance, incidents and emerging risks, escalating material concerns where appropriate.
• Provide risk input to technology change, cloud, cyber security, data, supplier, resilience and AI initiatives, supporting effective risk-based decision making.
• Support issue management and remediation activities, including validation of actions, evidence and closure outcomes.
• Coordinate and support responses to assurance reviews, internal audit, external reviews and regulatory requests, and assist with remediation of findings.
• Conduct targeted and thematic reviews to identify control weaknesses, emerging risks and opportunities for improvement.
• Support the ongoing development and practical application of risk frameworks, policies, standards and controls.
• Build risk capability across stakeholders through coaching, advice and collaboration.

Your Capability and Experience

• Strong experience in technology, cyber or operational risk, controls assurance, internal audit or risk consulting within a regulated environment.

• Experience assessing control design, effectiveness, remediation activities and IT General Controls (ITGCs).

• Strong understanding of risk frameworks, governance, issue management, incidents, assurance and risk assessments.

• Ability to translate complex technical and risk issues into clear business outcomes and actions.

• Experience applying Risk in Change (RiC) principles and partnering with stakeholders on project risk impacts.

• Strong stakeholder management, communication and influencing skills.

• Manager-level experience, or significant Senior Consultant experience leading reviews, assurance activities and stakeholder engagement.

Desirable

• Experience in superannuation, wealth management, banking, insurance or financial services.

• Knowledge of APRA requirements and frameworks such as NIST, ISO 27001, COBIT, CISA or ITIL.

• Exposure to cloud, cyber security, third-party risk, resilience, data governance, AI or major technology transformations.

• Relevant qualification or certification in risk, technology, cyber security or audit.

What to Expect

At CFS, you'll be working among the very best in the wealth management industry. It's an inspiring environment that encourages development and celebrates success.

CFS Culture

At CFS we are committed to creating a thriving environment where individuals can flourish. We believe that success is built upon strong teams, and we are dedicated to celebrating uniqueness, championing individuality and supporting a diverse and inclusive workforce. We believe that when you can truly be yourself, you can unlock your full potential.

Please note, CFS requires all candidates to have full work rights in Australia.

Where we have preferred candidates, background checks (including Police, Employment, Bankruptcy checks, ASIC banned and disqualified persons) will be completed prior to the final preferred candidate’s employment being confirmed. The outcomes of the background checks do not preclude the preferred candidate, however, they will be assessed against the inherent requirements of the role.

This role is based on Gadigal Land (Sydney).