Manager - Technology, Cyber & Data Risk

Cuscal; Sydney; On-site; AUD 150,000 - 190,000; Full time

Benefits offered by this job

Recognition and growth

Wellbeing initiatives

Diversity and inclusion

Cuscal Advantage discounts

Job summary

Cuscal Limited is seeking an experienced Technology, Cyber & Data Risk Manager to join its Group Risk & Compliance team in Sydney. You will provide independent Line 2 oversight across technology, cyber security and data risk, partnering with stakeholders to challenge and improve risk decisions and controls.

You will review incidents, support risk reporting to executives, and contribute to policy development amid evolving AI and cloud initiatives.

Qualifications

• Solid experience in technology, cyber or operational risk within financial services or payments.
• Strong knowledge of regulatory requirements including APRA CPS 230, CPS 234, CPG 235 and PCI-DSS.
• Familiarity with risk and technology frameworks: AS/NZS ISO 31000, ISO 27001, NIST CSF, COBIT, COSO and ITIL.
• Familiarity with AI standards and regulatory developments including Australian AI principles and EU AI Act.
• Strong critical thinking, analytical and problem-solving skills.
• Ability to influence senior stakeholders and build strong working relationships.
• Excellent written and verbal communication skills; able to simplify complex risk concepts.
• High initiative, sound judgement and ability to work autonomously.

Responsibilities

• Provide independent Line 2 oversight across technology, cyber and data risks.
• Partner with stakeholders to identify, assess and manage risk with constructive challenge.
• Review risk decisions, risk acceptances, control effectiveness and risk treatment plans.
• Review incidents, breaches and near misses to identify root causes and remediation.
• Perform targeted assurance reviews across technology, cyber and data controls.
• Provide independent risk oversight across major change initiatives including technology transformation, cloud migration and AI projects.
• Identify and escalate material risks, control deficiencies and emerging risk themes.
• Support risk reporting to senior management and executives.
• Develop and maintain risk policies, standards and training materials.

Skills

Technology risk

Cyber risk

Operational risk

Regulatory compliance

Stakeholder management

Communication

Analytical thinking

Job description

Job Description

Your Opportunity

We have an exciting opportunity for an experienced Technology, Cyber & Data Risk Manager to join our Group Risk & Compliance team.

In this role, you’ll provide independent Line 2 oversight, review and challenge across technology, cyber security and data risk. You’ll work closely with stakeholders across the business as a trusted risk advisor, providing advice that helps Cuscal achieve its objectives while operating within its risk appetite.

You’ll make an impact by:

• Providing independent Line 2 oversight across technology, cyber and data risks
• Partnering with stakeholders to identify, assess and manage risk while providing constructive challenge
• Reviewing and challenging risk decisions, risk acceptances, control effectiveness and risk treatment plans
• Reviewing incidents, breaches and near misses to identify root causes and recommend appropriate remediation
• Performing targeted assurance reviews across technology, cyber and data controls
• Providing independent risk oversight across significant change initiatives including technology transformation, cloud migration, AI initiatives and other digital projects
• Identifying and escalating material risks, control deficiencies and emerging risk themes
• Supporting risk reporting to senior management and executives
• Developing and maintaining risk policies, standards and training materials

Qualifications

What You’ll Bring

You’re an experienced risk professional who can combine strong technical knowledge with a practical, outcomes-focused approach. You’ll be comfortable working independently, constructively challenging stakeholders and translating complex risk concepts into clear, actionable insights for both technical and non-technical audiences.

To be successful in this role, you’ll bring:

• Solid experience in technology, cyber or operational risk within financial services or payments
• Strong knowledge of financial services regulatory and compliance requirements, including APRA CPS 230 and CPS 234, CPG 235 and PCI-DSS
• Familiarity with risk and technology frameworks including AS/NZS ISO 31000, ISO 27001, NIST CSF, COBIT, COSO and ITIL
• Familiarity with AI standards and regulatory developments including the Australian AI principles and EU AI Act
• Strong critical thinking, analytical and problem-solving skills
• The ability to influence senior stakeholders and build strong working relationships
• Excellent written and verbal communication skills, with the ability to simplify complex risk concepts for different audiences
• A high degree of initiative, sound judgement and the ability to work autonomously

Why Cuscal?

At Cuscal, you’ll experience interesting work that’s transforming. You get the security of an established organisation and the energy of a company committed to innovation. For 60 years, we’ve set the standard in payments, and now we’re preparing to redefine it for the future.

You’ll also enjoy a range of benefits, including:

• Recognition and growth: Celebrate achievements through IGNITE and grow with tailored development opportunities
• Wellbeing focus: We support your physical, mental and financial health with holistic initiatives and access to discounts via Cuscal Advantage
• Diversity and inclusion: Join a workplace that values different perspectives and flexible work arrangements

Cuscal is an equal opportunity employer committed to creating a diverse, inclusive and barrier-free workplace. We welcome applications from Aboriginal and Torres Strait Islander peoples, people living with disability, LGBTQIA+ communities and individuals from culturally diverse backgrounds.

Note: Cuscal does not accept unsolicited resumes from recruitment agencies or search firms.