Senior Manager, Technology Risk

CO001 Cuscal Limited; Australia; On-site; AUD 180,000 - 280,000; Full time

Job summary

Cuscal is seeking a Senior Manager, Technology Risk to lead technology risk across Enterprise Technology Services and the broader organization. You will develop risk frameworks, embed risk practices, and own risk reporting and analytics for visibility to the Board and Executive Leadership Team.

The role emphasizes managing AI/ emerging technologies risks, incident response, and driving controls automation to strengthen overall risk posture within a payments technology environment.

Qualifications

• Bachelor’s degree in information technology, Information Systems, Risk Management, Cybersecurity, Computer Engineering, or a related field.
• Certifications in technology, cyber, or data risk management (CRISC, CISA, CISM, CISSP) are desirable.
• Minimum of 7–10 years of experience in technology risk management within the financial services industry.
• Minimum 3–5 years’ experience in a people leadership role within a technology 1LoD Risk team, Governance team, or 2LoD function.
• Strong knowledge of risk management and IT frameworks and standards such as ITIL, ISO 27001, NIST, COBIT, and relevant APRA guidelines (CPS234, CPG235, CPS230, CPS220).
• Demonstrated experience in managing risks associated with AI, machine learning, and other emerging technologies.

Responsibilities

• Developing and Enhancing Risk Frameworks: Lead the creation, embedment and continuous improvement of Cuscal-wide technology risk frameworks, policies, and procedures ensuring compliance with relevant APRA and industry standards.
• Embedding Risk Practices: Work collaboratively with product domains and corporate functions to embed technology risk management practices into everyday activities, embed controls, and monitor/report on issues.
• Risk Reporting & Analytics: Own and uplift regular risk reporting mechanisms, including KRIs and KPIs, to provide visibility over technology and data risks to the Board and Executive Leadership Team
• Risk Identification and Assessment: Support ETS teams to identify, assess, and manage risk.
• Risk Mitigation: Support ETS teams in developing and implementing risk mitigation strategies and action plans to address identified risks.
• Issue Management: Support ETS teams in effective issue and action management.
• Controls Implementation & Assurance: Design and implement effective controls to manage technology risks, ensuring they are operating as intended.
• Incident Management: Lead the response to risk incidents owned by ETS, including root cause analysis and remediation efforts.
• Vendor Risk Assessments: Lead the assessment of third-party technology risks and controls including establishing and maintaining a framework.
• Reporting & Governance: Lead the Technology Risk Committee including preparation of papers, reports, minutes, actions and manage any escalations to Technology Leadership and the Enterprise Risk Committee.
• Focusing on AI and Emerging Technologies: Stay informed about the latest developments in AI and other emerging technologies to proactively identify potential risks.
• Controls Automation: Drive initiatives to automate technology risk & controls monitoring processes using advanced tools and technologies.
• Innovation Advocacy: Promote a culture of innovation in risk management practices, encouraging the adoption of new approaches and technologies.

Skills

Risk management

Leadership

IT frameworks

AI risk

Education

Bachelor's degree in IT/IS

Job description

Forward with Cuscal

Ever tapped your phone to buy a morning coffee, or made a purchase from your favourite online store? Chances are, we’ve made it happen. At Cuscal, we’ve been at the forefront of payments innovation for 60 years, enabling seamless, secure solutions that millions of Australians rely on every day. From launching Australia’s first ATM to being the first certified Australian fast payments Payer and Initiator in 2022, we’ve always pushed boundaries — and we’re not stopping now. That’s why we’re looking for a Senior Manager, Technology Risk to join our team and help shape the future of payments. Join us. Forward with Cuscal.

Your Opportunity

The Senior Manager, Technology Risk plays a critical leadership role in ensuring technology risks are effectively identified, assessed, treated, managed, and monitored across Enterprise Technology Services and the broader Cuscal organisation.

• Developing and Enhancing Risk Frameworks: Lead the creation, embedment and continuous improvement of Cuscal-wide technology risk frameworks, policies, and procedures ensuring compliance with relevant APRA and industry standards.
• Embedding Risk Practices: Work collaboratively with product domains and corporate functions to embed technology risk management practices into everyday activities, embed controls, and monitor/report on issues.
• Risk Reporting & Analytics: Own and uplift regular risk reporting mechanisms, including Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs), to provide visibility over technology and data risks to the Board and Executive Leadership Team
• Risk Identification and Assessment: Support ETS teams to identify, assess, and manage risk.
• Risk Mitigation: Support ETS teams in developing and implementing risk mitigation strategies and action plans to address identified risks.
• Issue Management: Support ETS teams in effective issue and action management.
• Controls Implementation & Assurance: Design and implement effective controls to manage technology risks, ensuring they are operating as intended.
• Incident Management: Working with various Cuscal teams lead the response to risk incidents owned by ETS, including root cause analysis and remediation efforts.
• Vendor Risk Assessments: Lead the assessment of third-party technology risks and controls including establishing and maintaining a framework.
• Reporting & Governance: Lead the Technology Risk Committee including preparation of papers, reports, minutes, actions and manage any escalations to Technology Leadership and the Enterprise Risk Committee.
• Focusing on AI and Emerging Technologies: Stay informed about the latest developments in AI and other emerging technologies to proactively identify potential risks. Support Cuscal teams in rapidly adopting new technologies in a safe and controlled manner.
• Controls Automation: Drive initiatives to automate technology risk & controls monitoring processes using advanced tools and technologies.
• Innovation Advocacy: Promote a culture of innovation in risk management practices, encouraging the adoption of new approaches and technologies.

To succeed in this role, you’ll have:

• Bachelor’s degree in information technology, Information Systems, Risk Management, Cybersecurity, Computer Engineering, or a related field.
• Desirable: Certifications in technology, cyber, or data risk management (CRISC, CISA, CISM, CISSP)
• Minimum of 7-10 years of experience in technology risk management within the financial services industry.
• Minimum 3-5 years’ experience in a people leadership role within a technology 1LoD Risk team, Governance team, or 2LoD function.
• Strong knowledge of risk management and IT frameworks and standards such as ITIL, ISO 27001, NIST, COBIT, and relevant APRA guidelines (CPS234, CPG235, CPS230, CPS220)
• Demonstrated experience in managing risks associated with AI, machine learning, and other emerging technologies.

Join us and reimagine the future

If you’re excited to join a company that’s shaping the future of how Australia moves money, we’d love to hear from you.

Applications close

Cuscal is an equal opportunity employer committed to an equitable, diverse, and socially inclusive work environment and a positive, barrier-free recruitment process. We welcome applicants from an Aboriginal and Torres Strait Islander heritage, people living with a disability, LGBTQIA+ and people from culturally diverse backgrounds to explore career opportunities with Cuscal.

Note: Cuscal does not accept unsolicited resumes from recruitment agencies or search firms.

Moving Payments Forward.

Together.

Cuscal is a payments and regulated data services provider in Australia.

Since 1966, we have enabled Australian banks, mutuals, corporates and fintechs to better serve and connect with their customers through the implementation of innovative technology solutions.

Our vision To transform the future of how money moves and how Australia does business.

Our mission We partner with forward-thinking businesses to deliver innovative and secure payment solutions that drive growth in the economy.

Our purpose To enable competition and power progress, one transaction at a time.