Risk Manager-QLD, WA, ACT, VIC, NSW, NT, SA, TAS

IT Alliance Australia; Australia; Hybrid; AUD 110,000 - 130,000; Full time

Job summary

A leading technology firm is seeking an IT Risk Manager to oversee IT risk management processes, ensure compliance with frameworks, and develop risk management policies. The successful candidate should have strong experience in risk management, communication skills, and be capable of fostering a positive risk culture. This role offers hybrid working arrangements for applicants in Australia.

Qualifications

• Strong understanding of risk management practices and processes.
• Ability to anticipate and critically assess risks.
• Excellent time management and coordination skills.
• Outstanding stakeholder management and communication skills.

Responsibilities

• Oversee the identification and management of IT-related risks.
• Ensure compliance with risk management frameworks.
• Monitor and report on IT operations risk posture.
• Develop and implement risk management policies.

Skills

Risk management practices

IT systems and networking knowledge

Analytical skills

Stakeholder management

Communication skills

Job description

IT Risk Manager

One of our leading federal government clients is seeking to engage an IT Risk Manager for QLD, WA, ACT, VIC, NSW, NT, SA, TAS locations.

Note: Candidate must have Baseline security clearance.

Extension term: 24 months. Working arrangements: Hybrid.

Our client is looking for a high-performing Risk Management Specialist with strong demonstrated experience in establishing risk management policies, practices and procedures specific to IT operations. The ideal candidate will have the ability to identify and assess IT‑related risks, conduct and document risk assessments, develop and implement risk mitigations, and continuously monitor and report on IT operations risk posture. They will need to work closely with internal teams and managed service partners while ensuring best practice and Departmental risk management framework and standards are applied and managed.

Key Duties and Responsibilities

• Contribute to the Department’s vision and strategic priorities by overseeing the identification, evaluation, review and management of threats and opportunities.
• Work closely with internal teams and managed service partners to ensure compliance with the Department’s risk management framework and any relevant laws, regulations and industry standards related to IT operations and security.
• Advocate and drive a positive risk culture, encouraging staff to take appropriate and calculated risks within the risk tolerance to achieve objectives.
• Facilitate the continuous identification and assessment of IT‑related risks, including conducting and documenting risk assessments as needed.
• Facilitate the development, approval and implementation of risk mitigations ensuring actions are tracked and completed in a timely manner.
• Escalate risks that exceed thresholds through the Department’s approved process as outlined in its risk management framework.
• Continuously monitor and report on IT operations risk posture, status, threats and vulnerabilities.
• Integrate risk management into ITSM practices such as incident, change and problem management.
• Develop and promulgate risk management policies and procedures specific to IT operations, including training and education for team members.
• Maintain regular stakeholder meetings and formal risk governance meetings.
• Perform regular audits of IT risk artefacts to ensure compliance with frameworks, policies, processes and data integrity.

Qualifications and Experience

1. Strong understanding of risk management practices and processes, with knowledge of standards such as ISO 31000:2018.

2. Good understanding of IT systems and networking, IT service management, cyber security and information management.

3. Good analytical skills enabling the anticipation and critical assessment of risks.

4. Excellent time management, coordination and facilitation skills for effective collaboration with multiple stakeholders.

5. Outstanding stakeholder management and communication skills, building strong relationships with service providers and colleagues.

6. Demonstrated ability to drive a positive risk culture.

Highly Desirable

1. 3+ years’ experience in a similar risk management role within an IT function of a large organisation.

2. Proven experience conducting and documenting risk assessments and managing the risk lifecycle from open to closure.

3. Project management experience coordinating and tracking activities across many stakeholders.

4. Experience working collaboratively with large managed service providers.

How to Apply

If you would like to apply for the above role, please send your updated CV with Cover Letter to [e-mail]