Manager - Technology Resilience - Oceania Data Office

Ernst & Young Advisory Services Sdn Bhd; Sydney; Hybrid; AUD 150,000 - 210,000; Full time

Benefits offered by this job

Career development

Flexible work

Extended leave benefits

Salary negotiable

Job summary

EY Oceania is seeking a Manager - Technology Resilience to lead the day-to-day execution of resilience initiatives across the Oceania Data Office. You will own remediation of technology asset risk, work with product and technical owners, and translate AI threat intelligence into actionable risk reduction.

The role is hands-on, collaborates with asset owners, and offers flexible hours with base in any EY Australia office. Strong governance and leadership impact are essential for success.

Qualifications

• Experience in technology risk, cyber security, infrastructure or application remediation, vulnerability management, or technology delivery in a complex enterprise environment.
• Understanding of vulnerability and patch management, end-of-life technology, asset lifecycle and decommissioning, and awareness of frontier AI capabilities changing cyber threat landscape.

Responsibilities

• Drive remediation of technology asset risk across the Oceania estate with Product and Technical Owners.
• Confirm accountable ownership for every asset with named Product and Technical Owner.
• Prioritise remediation with information security and technology teams, ranking vulnerabilities by severity and ageing.
• Deliver phased, owner-approved remediation to keep client platforms live.
• Own the Asset and Risk Control Tower and ensure data accuracy across the region.
• Turn AI-driven threat intelligence into action across the Oceania estate.

Skills

Technology risk

Cyber security

Vulnerability management

Asset management

Patch management

Stakeholder management

Leadership

Education

CRISC

CISM

CISSP

Engineering/Cyber degree

Tools

Asset management platforms

Configuration management

Job description

Manager - Technology Resilience - Oceania Data Office

Location: Sydney

Other locations: Anywhere in Country

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

Manager - Technology Resilience – Oceania Data Office

The opportunity

Frontier AI is compressing the gap between a vulnerability becoming known and becoming exploitable, and regulators and clients are asking sharper questions about technology resilience. EY Oceania is building a dedicated, ongoing capability to strengthen how technology assets are owned, secured and maintained across the region, spanning our response to AI-driven cyber and vulnerability risk and the enterprise asset management uplift. As our Technology Risk and Resilience Manager, you will lead its day-to-day execution.

This is deliberately a hands-on role, not a governance one. You will work directly with asset owners across the Service Lines to drive accountability, and progress vulnerability and end-of-life remediation with our information security and Service Line technology teams. You will elevate only the few decisions that genuinely need a leader. Success is measured by risk reduced, not risk reported.

The role reports to the Oceania Data Lead within the Office of the Chief Technology and Information Officer (CTIO) and can be based at any EY office across Australia and may be adjusted for flexible or reduced hours. Please speak with us about the options.

Your key responsibilities

• Drive remediation of technology asset risk across the Oceania estate. Work asset by asset with Product and Technical Owners to close vulnerabilities, replace end-of-life components and retire obsolete systems.
• Confirm accountable ownership. Make sure every asset in the estate has a named Product and Technical Owner, and keep that record current.
• Prioritise and sequence remediation with our information security and technology teams. Rank vulnerabilities by severity, exposure and ageing, and coordinate change and patching windows.
• Deliver phased, owner-approved remediation. Sequence end-of-life and internet-facing infrastructure work so live client platforms stay available.
• Own the Asset and Risk Control Tower as a working tool. Keep the single regional view of asset, vulnerability and certification data accurate and current, improve data quality and surface shadow assets.
• Turn AI-driven threat intelligence into action. Translate emerging intelligence into concrete remediation across the Oceania estate.

Skills and attributes for success

• Experience in technology risk, cyber security, infrastructure or application remediation, vulnerability management, or technology delivery in a complex enterprise environment.
• A working understanding of vulnerability and patch management, end-of-life technology, asset lifecycle and decommissioning, and awareness of how frontier AI capabilities are changing the cyber threat landscape and what that means for the speed of operational response.
• Strong stakeholder skills across technology, risk, business and leadership audiences, with the credibility to influence people who do not report to you.
• Sound judgement about when to solve a problem, when to elevate it and when to formally accept residual risk.
• Comfort working to a remediation schedule where progress depends on teams outside your reporting line.

Ideally, you’ll also have the skills and attributes below but don’t worry if you don’t tick all the boxes. We’re interested in your aptitude, attitude and willingness to learn.

• Experience running a remediation or resilience program across a distributed technology estate with federated ownership.
• Familiarity with enterprise asset management or configuration management platforms and the data quality challenges that come with them.
• Exposure to Responsible AI, data classification, privacy or regulatory obligations relating to technology resilience.
• Relevant certifications such as CRISC, CISM or CISSP, or a degree in a technology, cyber security or engineering discipline.

What we offer you

At EY, we’ll fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. We’re proud to be recognised as the #1 WORK180 Endorsed Employer in the Top 101 Employers for Women 2026. Learn more .

• Career development: At EY, your career is yours to shape!We’ll develop you with future-focused skills and equip you with world-class experiences ey.com/au/careerdevelopment
• Flexible work arrangements: Our flexible work policies empower you to balance your professional and personal life, fostering a culture of trust and autonomy.
• A comprehensive benefits package: From a yearly wellness incentive, to access to additional 8 weeks of flex leave per year, and family-friendly policies, including up to 26 weeks of gender-neutral paid parental leave, we cater to your diverse needs to help you thrive both personally and professionally www.ey.com/au/benefits
• Salary: We offer a competitive salary which is open to negotiation pending on skills and experience.

Acknowledgement of Country

EY acknowledges the Traditional Owners and Custodians of the lands on which EY offices are located around Australia. We pay our respects to their cultures, and to their Elders — past, present, and emerging. Find out more about our vision for reconciliation at ey.com/en_au/careers/indigenous

Inclusiveness is core to who we are and how we work together, driving value for our people and for our business. We encourage applications from people of all ages, nationalities, abilities, cultures, sexual orientations, and gender identities and are committed to providing an equitable and barrier free recruitment experience for all. We encourage you to share any support and adjustments you need to be your best and participate equitably in our recruitment process. We understand sharing your needs with us can be daunting, so if you have questions before or during your application, we welcome you to get in touch at [e-mail] or [phone] (option 2). Anything you tell us will be kept completely confidential.

Our preferred applicant will be required to undertake employment screening by EY or our external third-party provider.

EY|Building a better working world