Manager, Technology Risk & Controls (RS)

AustralianSuper Pty Ltd; Melbourne; Hybrid; AUD 140,000 - 190,000; Full time

Job summary

AustralianSuper is seeking a Manager, Technology Risk & Controls to strengthen the control environment across Technology, Digital & Data. This role leads risk-based control testing, designs tests and evaluates evidence, and communicates findings to Technology leaders to drive remediation.

You will work with technology leaders, risk and assurance teams to identify weaknesses, support remediation, and embed robust risk management into technology operations and decision making.

Qualifications

• Strong experience across Technology Risk, controls, audit or assurance within Financial Services or another regulated environment.
• Hands-on experience designing, assessing and testing Technology controls, including defining testing procedures and evidence requirements.
• Strong understanding of risks and controls across areas such as cyber security, identity and access management, cloud, data, infrastructure, third parties and operational resilience.
• Experience identifying control deficiencies and partnering with stakeholders to develop and track remediation.
• Demonstrated experience working with CPS 234, supported by strong knowledge of its requirements.
• Strong stakeholder management skills and the confidence to constructively challenge technical and senior stakeholders.
• Experience working across Line 1 Risk, Line 2 Risk, Technology and assurance functions.
• Hands-on experience with GRC platforms such as Archer.
• Hold an accreditation in Risk Management from a recognised body like RMIA or GIA or be willing to obtain one after joining AustralianSuper.
• Demonstrated ability to understand and translate external regulatory requirements to shape business outcomes

Responsibilities

• Coordinate and deliver risk-based Technology control testing and assurance activities.
• Assess control design, operating effectiveness and supporting evidence, providing credible and constructive challenge.
• Identify control deficiencies, support root-cause analysis and drive effective remediation with accountable owners.
• Support Technology risk assessments, control reviews and the ongoing maturity of risk and control practices.
• Analyse testing and GRC information to identify trends, systemic issues and opportunities for control improvement and automation.
• Translate technical findings into concise insights and reporting for Technology leaders and governance forums.

Skills

Technology risk

Controls testing

Stakeholder management

Cyber security

Tools

Archer

Job description

• Strengthen Technology risk, controls and assurance across TDD

Job Description

Manager, Technology Risk & Controls

• Permanent, full-time position
• Flexible, hybrid working environment
• Strengthen Technology risk, controls and assurance across TDD

At AustralianSuper, we truly care about our colleagues. We know work and life are intertwined. That ’ s why we support the diverse needs of everyone and have policies that enable us all to thrive and be truly flexible. We ensure diversity is celebrated for the opportunity it provides us all to learn and grow and deliver better outcomes for members.We are dedicated to building a high-performance environment underpinned by a strong risk culture, ensuring we deliver the best outcomes for our members.

Your New Role

Are you an experienced Technology Risk professional who enjoys getting into the detail, challenging effectively and helping teams build stronger controls?

As Manager, Technology Risk & Controls, you'll play a key role within our Line 1 Technology Risk & Controls function, helping strengthen the control environment across Technology, Digital & Data. You'll lead risk-based control testing, assess whether key controls are appropriately designed and operating effectively, and turn your findings into clear, practical insights.

Working closely with Technology leaders, control owners, Group Risk and assurance teams, you'll identify weaknesses, support remediation and help embed effective risk management into technology operations and decision-making.

What You'll Do

• Coordinate and deliver risk-based Technology control testing and assurance activities.
• Assess control design, operating effectiveness and supporting evidence, providing credible and constructive challenge.
• Identify control deficiencies, support root-cause analysis and drive effective remediation with accountable owners.
• Support Technology risk assessments, control reviews and the ongoing maturity of risk and control practices.
• Analyse testing and GRC information to identify trends, systemic issues and opportunities for control improvement and automation.
• Translate technical findings into concise insights and reporting for Technology leaders and governance forums.

What You'll Need

• Strong experience across Technology Risk, controls, audit or assurance within Financial Services or another regulated environment.
• Hands-on experience designing, assessing and testing Technology controls, including defining testing procedures and evidence requirements.
• Strong understanding of risks and controls across areas such as cyber security, identity and access management, cloud, data, infrastructure, third parties and operational resilience.
• Experience identifying control deficiencies and partnering with stakeholders to develop and track remediation.
• Demonstrated experience working with CPS 234, supported by strong knowledge of its requirements.
• Strong stakeholder management skills and the confidence to constructively challenge technical and senior stakeholders.
• Experience working across Line 1 Risk, Line 2 Risk, Technology and assurance functions.
• Hands-on experience with GRC platforms such as Archer.
• Hold an accreditation in Risk Management from a recognised body like Risk Management Institute of Australasia (RMIA) or Governance Institute of Australia (GIA) or be willing to obtain one after joining AustralianSuper.
• Demonstrated ability to understand and translate external regulatory requirements to shape business outcomes

Highly Regarded

• Financial Services experience and knowledge of APRA prudential requirements.
• CISA, CRISC or equivalent professional certification.
• Experience with automated control testing, data analytics or technology-enabled control monitoring.
• Experience with Microsoft Azure or Technology risk transformation initiatives.

Life at AustralianSuper

AustralianSuper is committed to colleague development, and we support our people with ongoing learning, coaching and training, as well as career opportunities across our expanding global organisation. We offer generous leave entitlements and promote a blended working environment in which all roles can flex, and we’re happy to discuss what this looks like for you.

We cultivate a workplace that champions safety, respect, inclusiveness and diversity. We are committed to supporting our diverse workforce in a way that is inclusive and embraces diversity in all its forms. If you require any reasonable adjustments to the recruitment process or the role, please let our recruitment team know.

Australian or New Zealand citizenship or Australian permanent residency status is required.

Progress powered by purpose.

https://www.australiansuper.com/careers/candidate-privacy-notice

AustralianSuper may use AI to review resumes and conduct initial phone interviews. This involves processing your resume, cover letter, and voice recording in Australia and the USA to help assess your suitability for the applied role. When invited to an AI phone screening, you may opt for a traditional phone screening instead.