Manager Technology Risk

Bendigo Bank; City of Melbourne; Hybrid; AUD 90,000 - 130,000; Full time

Job summary

Bendigo Bank is seeking an energetic Manager, Technology Risk to join the Second Line of Accountability team in a hybrid, flexible work arrangement. You will oversee technology risk controls, provide independent review, and guide business teams through changes while maintaining 2LoA independence.

Ideal candidates bring 3–5 years in technology risk, IT audit, or information security assurance, with knowledge of CPS 234/230 and ISO/NIST/COBIT frameworks.

Qualifications

• 3–5 years of practical experience in technology risk, IT audit, operational risk, or information security assurance.
• Working knowledge of key prudential standards (APRA CPS 234 and CPS 230) and frameworks (ISO 27001, NIST, COBIT).
• Proactive mindset with strong analytical skills and ability to evaluate risk-vs-reward commercially.

Responsibilities

• Perform risk-based control assurance and independent monitoring of key technology and information security controls.
• Provide objective 2LoA challenge, advisory support, and oversight on technology change initiatives and risk events.
• Analyze complex technology risk matters, control exceptions, and vendor risks.
• Identify emerging risk trends and monitor risk appetite metrics.

Skills

Risk analysis

Stakeholder collaboration

Problem solving

Communication

Education

Relevant tertiary qualifications

Job description

• Location: Melbourne or Adelaide (Hybrid / Flexible working options)
• Work Type: Permanent, Full-time
• Closing Date: 30th September

Make Your Mark in Technology & Operational Risk

We’ve never been ‘just a bank’. Just like you should never be ‘just an employee’. We’re united in our belief that in banking, better can be bigger, and together we’re making it happen. We are committed to supporting our customers and communities, and our Group Operational Risk team plays a vital role in keeping our organisation resilient, safe, and future-ready.

It starts here. With Bendigo Bank… and you.

We are looking for an energetic, inquisitive Manager, Technology Risk to join our Second Line of Accountability (2LoA) team.

If you are an experienced risk analyst, consultant, or risk specialist looking to step up into a role where you can broaden your impact across technology, cyber, and operational risk, this is the perfect opportunity.

What You’ll Do

Reporting to the Senior Manager, Information Security Risk, you will provide constructive oversight, guidance, and independent review across technology and operational risk domains. Rather than sitting on the sidelines, you will be hands‑on in assessing controls, improving processes, and helping business teams navigate dynamic digital changes safely.

Key responsibilities include:

• Operational & Technology Risk Management: Perform risk‑based control assurance, targeted deep‑dive reviews, and independent monitoring of key technology and information security controls to ensure robust risk management.
• Independent Review & Constructive Challenge: Provide objective 2LoA challenge, advisory support, and oversight on technology change initiatives, risk events, and IT/InfoSec incident responses across First Line teams.
• Problem Solving & Third‑Party Risk: Act as a subject matter expert to analyse complex technology risk matters, control exceptions, and service provider/vendor risks, offering pragmatic, solution‑oriented guidance while maintaining 2LoA independence.
• Systems Thinking & Insights: Connect the dots between people, systems, and processes to identify emerging risk trends and help monitor risk appetite metrics.

What You’ll Bring

We are looking for a collaborative, analytical risk professional with a foundational‑to‑advanced understanding of operational and technical risk practices:

• Relevant Experience: Typically, 3 to 5 years of practical experience in technology risk, IT audit, operational risk, or information security assurance (within financial services, professional services, or a regulated environment).
• Core Risk Capabilities: Hands‑on experience executing risk‑based control assurance, performing independent technology risk assessments, and providing constructive 2LoA challenge and risk‑profile reporting within a Three Lines of Accountability (3LoA) model.
• Regulatory & Framework Familiarity: Working knowledge of key prudential standards (such as APRA CPS 234 and CPS 230) and industry frameworks (e.g., ISO 27001, NIST, or COBIT).
• Curiosity & Problem Solving: A proactive mindset, strong analytical skills, and the ability to evaluate risk‑versus‑reward commercially.
• Stakeholder Collaboration: Clear, adaptable communication skills with the confidence to build trusted relationships and offer constructive challenge.
• Qualifications: Relevant tertiary qualifications; industry certifications (such as CISA, CRISC, or Security+) are valued but not mandatory.

We offer flexible work options that put our people first, working in a hybrid model with a minimum 2 day Head Office attendance requirement determined by your Leader, to find a rhythm that works best for you and your team.

So, why work for us?

Want big impact that matters? Here, you’ll know your work directly benefits the customers and communities we all serve. You’ll also get access to a great range of benefits, including:

• Flexibility means different things for different people. Whether it’s hybrid work, flexible hours, a compressed work week, job‑sharing or something different, our flexible work options are designed to put people first.
• Health and wellbeing support, including discounted gym memberships, private health insurance options, and our Employee Assistance Program (EAP) for you and your immediate family members.
• Opportunities to take your learning to the next level through our corporate university ‘BEN U’ or at an external provider of your choice.

We believe a diverse workforce supported by an inclusive culture is central to our success and we actively encourage applications from those who bring diversity of thought to our business. We support candidate requests for adjustment to accommodate an illness, injury, or disability to equitably participate in the selection process.

Still in two minds?

Research suggests 60% of women and underrepresented groups might stop here, even after getting as far as drafting an application. We believe that diversity makes every team stronger, so even if you don’t tick every box, we still want to see your application!

We’re making better, bigger. And we’ll get there with you.

Now’s the time to set your sights even higher on the future you and the future career you deserve.