Senior Manager – Enterprise Risk

IREN; Sydney; On-site; AUD 160,000 - 230,000; Full time

Job summary

IREN is seeking a Senior Enterprise Risk Manager to design, operate and uplift its group risk framework across Australia, US, Canada and Europe. You will partner with executives to identify, assess and mitigate risks in AI, cyber, finance and regulatory domains, and report to the Audit & Risk Committee.

In this senior role you will lead risk taxonomy, KRIs and risk governance, building capabilities across the business while ensuring rigorous risk oversight in a fast-growing, NASDAQ-listed data

Qualifications

• 8+ years’ experience across enterprise risk, operational risk, internal audit or governance roles, including at least 3 years at manager level or above and ownership of an enterprise risk management framework in a listed or highly regulated organisation.
• Deep understanding of Enterprise Risk Management and GRC platforms, with working knowledge of technology risk, cyber security, AI risk and data governance.
• Strong experience designing, implementing and uplifting enterprise risk frameworks, including risk taxonomy, enterprise risk assessment cycles, KRI design and Board-level reporting.
• Demonstrated ability to build frameworks, registers, governance models and processes from the ground up, and to scale them across a multi-jurisdictional business.
• Experience within large, complex environments such as data centres, banking, infrastructure, energy or technology; exposure to listed-company governance requirements is highly regarded.
• Experience partnering with senior executives as a second-line risk partner and presenting to Board committees, with the credibility to challenge assumptions constructively.
• Genuine fluency with technology and AI as tools for solving risk problems at scale, with concrete examples of replacing manual work with better-designed solutions.
• A commercially pragmatic mindset, with the ability to balance risk and business outcomes.
• Ability to operate with a high degree of autonomy, mobilise action and deliver outcomes in complex, fast-moving environments.

Responsibilities

• Own and continuously uplift IREN’s enterprise risk management framework, including the risk management policy and supporting standards, ensuring it remains fit for purpose as the business scales.
• Maintain the enterprise risk taxonomy and group risk register and run the annual and half-yearly enterprise risk assessment cycle with the Executive team and functional risk owners.
• Embed clear risk ownership, escalation and issue management practices across the first line, ensuring root causes are understood, remediation actions are closed and lessons are fed back into the framework.
• Oversee the group’s risk management system and tooling, including data quality, workflow and reporting configuration, and champion the use of GRC platforms and AI tooling to make risk management scalable.
• Facilitate risk workshops and deep dives on emerging or material risks across AI cloud service delivery, cyber and physical security, finance and regulatory change.
• Act as the second-line risk partner for nominated functions (e.g. Operations, Finance), challenging risk assessments, supporting control design and providing actionable risk insights to business leaders.
• Provide expert risk input into new markets and new acquisitions, drawing on working knowledge of strategic, operational, technology, cyber, AI, data and regulatory risks.
• Build risk capability across the business through training, tools and coaching of risk owners and risk champions, fostering a proactive risk culture and embedding risk awareness into decision making.
• Prepare the quarterly Enterprise Risk Report and supporting papers for the Audit & Risk Committee, including the risk profile, KRI dashboards, emerging risks and management actions.
• Support the Director, Risk & Compliance in operating risk governance forums and accountability structures, ensuring they operate effectively at multi-jurisdictional scale.

Skills

Enterprise risk management

GRC platforms

Technology risk

Cyber security

AI risk

Data governance

Board reporting

Risk taxonomy

Stakeholder collaboration

Tools

GRC software suites

AI tooling

Job description

About IREN

IREN is a next-generation data centre business powering the future of high-performance computing, AI workloads and digital assets, all using 100% renewable energy.

About IREN

IREN is a next-generation data centre business powering the future of high-performance computing, AI workloads and digital assets, all using 100% renewable energy.

Since launching in Australia in 2019, IREN has expanded rapidly. The business now operates across Australia, North America and Europe and is listed on NASDAQ. IREN builds, owns and operates its own infrastructure and is committed to doing so in a way that is responsible, sustainable and impactful to the communities where it operates.

This is an exciting time to join IREN as the business continues its global growth trajectory.

The Opportunity

This role sits within the Risk & Compliance function and reports to the Director, Risk & Compliance.

As a NASDAQ-listed business operating across Australia, the US, Canada and Europe, IREN’s risk landscape has grown rapidly in scale, complexity and consequence. This senior role owns the design, operation and continuous uplift of IREN’s enterprise risk management framework, ensuring risks are identified, owned, tracked and managed consistently across the group, and that the Executive team and the Board have a clear and timely view of the risk profile.

You will work with a team of risk professionals and be accountable for the enterprise risk framework end to end, including the risk taxonomy, the enterprise risk assessment cycle, key risk indicators, risk governance and Board-level reporting. Working closely with business leaders and functional risk owners across the group, you will assess risk exposures, challenge assumptions, identify emerging themes and provide actionable risk insights, helping to shape IREN’s approach to risk as it navigates an increasingly complex landscape.

Key Responsibilities

Enterprise risk framework

• Own and continuously uplift IREN’s enterprise risk management framework, including the risk management policy and supporting standards, ensuring it remains fit for purpose as the business scales.
• Maintain the enterprise risk taxonomy and group risk register and run the annual and half-yearly enterprise risk assessment cycle with the Executive team and functional risk owners.
• Embed clear risk ownership, escalation and issue management practices across the first line, ensuring root causes are understood, remediation actions are closed and lessons are fed back into the framework.
• Oversee the group’s risk management system and tooling, including data quality, workflow and reporting configuration, and champion the use of GRC platforms and AI tooling to make risk management scalable.

Risk insight and business partnering

• Facilitate risk workshops and deep dives on emerging or material risks across AI cloud service delivery, cyber and physical security, finance and regulatory change.
• Act as the second-line risk partner for nominated functions (e.g. Operations, Finance), challenging risk assessments, supporting control design and providing actionable risk insights to business leaders.
• Provide expert risk input into new markets and new acquisitions, drawing on working knowledge of strategic, operational, technology, cyber, AI, data and regulatory risks.
• Build risk capability across the business through training, tools and coaching of risk owners and risk champions, fostering a proactive risk culture and embedding risk awareness into decision making.

Governance and reporting

• Prepare the quarterly Enterprise Risk Report and supporting papers for the Audit & Risk Committee, including the risk profile, KRI dashboards, emerging risks and management actions.
• Support the Director, Risk & Compliance in operating risk governance forums and accountability structures, ensuring they operate effectively at multi-jurisdictional scale.

About You

The ideal candidate will bring:

• 8+ years’ experience across enterprise risk, operational risk, internal audit or governance roles, including at least 3 years at manager level or above and ownership of an enterprise risk management framework in a listed or highly regulated organisation.
• Deep understanding of Enterprise Risk Management and GRC platforms, with working knowledge of technology risk, cyber security, AI risk and data governance.
• Strong experience designing, implementing and uplifting enterprise risk frameworks, including risk taxonomy, enterprise risk assessment cycles, KRI design and Board-level reporting.
• Demonstrated ability to build frameworks, registers, governance models and processes from the ground up, and to scale them across a multi-jurisdictional business.
• Experience within large, complex environments such as data centres, banking, infrastructure, energy or technology; exposure to listed-company governance requirements is highly regarded.
• Experience partnering with senior executives as a second-line risk partner and presenting to Board committees, with the credibility to challenge assumptions constructively.
• Genuine fluency with technology and AI as tools for solving risk problems at scale, with concrete examples of replacing manual work with better-designed solutions.
• A commercially pragmatic mindset, with the ability to balance risk and business outcomes.
• Ability to operate with a high degree of autonomy, mobilise action and deliver outcomes in complex, fast-moving environments.