Senior Manager, Technology Risk

Cuscal Limited; Sydney; On-site; AUD 180,000 - 250,000; Full time

Benefits offered by this job

Recognition and growth

Wellbeing focus

Inhouse Barista

Job summary

Cuscal Limited in Sydney is seeking a Senior Manager, Technology Risk to lead identification, assessment, treatment and monitoring of technology risks across Enterprise Technology Services. You will embed risk practices, manage issues, and report KRIs/KPIs to the Board and Executive Leadership.

You will drive risk frameworks, incident response, vendor risk and controls, while staying ahead of AI and emerging tech risks with a proactive governance approach.

Qualifications

• Bachelor's degree in information technology, information systems, risk management, cybersecurity, or related field.
• Certifications in technology risk (CRISC, CISA, CISM, CISSP).
• 7–10 years in technology risk management within financial services.
• 3–5 years in a people leadership role in a risk/governance function.
• Strong knowledge of IT risk frameworks including ITIL, ISO 27001, NIST, COBIT and APRA guidelines.

Responsibilities

• Lead development and embedment of technology risk frameworks, policies and procedures.
• Embed risk practices across products and functions; monitor issues and controls.
• Own risk reporting, KRIs and KPIs for visibility to Board and ELT.
• Support risk identification, assessment and mitigation for ETS teams.
• Design and implement controls; oversee incident response and root cause analysis.
• Lead vendor risk assessments and third-party risk governance.
• Drive automated risk monitoring and stay ahead on AI risk developments.

Skills

Technology risk leadership

Risk management

Stakeholder management

Communication

Education

Bachelor's degree in IT / related field

CRISC

CISA

CISM

CISSP

Tools

ITIL

ISO 27001

NIST

COBIT

APRA CPS234

APRA CPS235

APRA CPS230

APRA CPS220

Job description

Job Description

Your Opportunity

The Senior Manager, Technology Risk plays a critical leadership role in ensuring technology risks are effectively identified, assessed, treated, managed, and monitored across Enterprise Technology Services and the broader Cuscal organisation.

• Developing and Enhancing Risk Frameworks: Lead the creation, embedment and continuous improvement of Cuscal-wide technology risk frameworks, policies, and procedures ensuring compliance with relevant APRA and industry standards.
• Embedding Risk Practices: Work collaboratively with product domains and corporate functions to embed technology risk management practices into everyday activities, embed controls, and monitor/report on issues.
• Risk Reporting & Analytics: Own and uplift regular risk reporting mechanisms, including Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs), to provide visibility over technology and data risks to the Board and Executive Leadership Team
• Risk Identification and Assessment: Support ETS teams to identify, assess, and manage risk.
• Risk Mitigation: Support ETS teams in developing and implementing risk mitigation strategies and action plans to address identified risks.
• Issue Management: Support ETS teams in effective issue and action management.
• Controls Implementation & Assurance: Design and implement effective controls to manage technology risks, ensuring they are operating as intended.
• Incident Management: Working with various Cuscal teams lead the response to risk incidents owned by ETS, including root cause analysis and remediation efforts.
• Vendor Risk Assessments: Lead the assessment of third-party technology risks and controls including establishing and maintaining a framework.
• Reporting & Governance: Lead the Technology Risk Committee including preparation of papers, reports, minutes, actions and manage any escalations to Technology Leadership and the Enterprise Risk Committee.
• Focusing on AI and Emerging Technologies: Stay informed about the latest developments in AI and other emerging technologies to proactively identify potential risks. Support Cuscal teams in rapidly adopting new technologies in a safe and controlled manner.
• Controls Automation: Drive initiatives to automate technology risk & controls monitoring processes using advanced tools and technologies.
• Innovation Advocacy: Promote a culture of innovation in risk management practices, encouraging the adoption of new approaches and technologies.

Qualifications

To succeed in this role, you’ll have:

• Bachelor’s degree in information technology, Information Systems, Risk Management, Cybersecurity, Computer Engineering, or a related field.
• Desirable: Certifications in technology, cyber, or data risk management (CRISC, CISA, CISM, CISSP)
• Minimum of 7-10 years of experience in technology risk management within the financial services industry.
• Minimum 3-5 years’ experience in a people leadership role within a technology 1LoD Risk team, Governance team, or 2LoD function.
• Strong knowledge of risk management and IT frameworks and standards such as ITIL, ISO 27001, NIST, COBIT, and relevant APRA guidelines (CPS234, CPG235, CPS230, CPS220)
• Demonstrated experience in managing risks associated with AI, machine learning, and other emerging technologies.

Additional Information

Why Cuscal?

At Cuscal, you’ll experience interesting work that’s transforming. You get the security of an established organisation and the energy of a company committed to innovation. For 60 years, we’ve set the standard in payments, and now we’re preparing to redefine it for the future.

You’ll also enjoy a range of benefits, including:

• Recognition and growth: Celebrate achievements through IGNITE and grow with tailored development opportunities
• Wellbeing focus: We support your physical, mental and financial health with holistic initiatives and access to discounts via Cuscal Advantage
• Inhouse Barista: for whenever you feel like your favourite hot beverage

Cuscal is an equal opportunity employer committed to creating a diverse, inclusive and barrier-free workplace. We welcome applications from Aboriginal and Torres Strait Islander peoples, people living with disability, LGBTQIA+ communities and individuals from culturally diverse backgrounds.

#LI-NL