Senior Manager, Technology Risk

Cuscal Limited; Sydney; On-site; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Recognition and growth

Wellbeing focus

Inhouse Barista

Job summary

Cuscal Limited in Sydney invites a Senior Manager, Technology Risk to lead risk identification, assessment, and mitigation across Enterprise Technology Services. You’ll shape frameworks, embed practices, and report to the Board and Executive Leadership Team.

The role focuses on AI and emerging tech risk, incident response, third-party risk, and governance. Minimum 7–10 years in tech risk within financial services, plus 3–5 years in people leadership, with ITIL/ISO/NIST knowledge.

Qualifications

• Bachelor’s degree in information technology, Information Systems, Risk Management, Cybersecurity, Computer Engineering, or a related field.
• Desirable: Certifications in technology, cyber, or data risk management (CRISC, CISA, CISM, CISSP).
• Minimum of 7-10 years of experience in technology risk management within the financial services industry.
• Minimum 3-5 years’ experience in a people leadership role within a technology 1LoD Risk team, Governance team, or 2LoD function.
• Strong knowledge of risk management and IT frameworks and standards such as ITIL, ISO 27001, NIST, COBIT, and relevant APRA guidelines (CPS234, CPG235, CPS230, CPS220).
• Demonstrated experience in managing risks associated with AI, machine learning, and other emerging technologies.

Responsibilities

• Developing and Enhancing Risk Frameworks: Lead the creation, embedment and continuous improvement of Cuscal-wide technology risk frameworks, policies, and procedures ensuring compliance with relevant APRA and industry standards.
• Embedding Risk Practices: Work collaboratively with product domains and corporate functions to embed technology risk management practices into everyday activities, embed controls, and monitor/report on issues.
• Risk Reporting & Analytics: Own and uplift regular risk reporting mechanisms, including Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs), to provide visibility over technology and data risks to the Board and Executive Leadership Team
• Risk Identification and Assessment: Support ETS teams to identify, assess, and manage risk.
• Risk Mitigation: Support ETS teams in developing and implementing risk mitigation strategies and action plans to address identified risks.
• Issue Management: Support ETS teams in effective issue and action management.
• Controls Implementation & Assurance: Design and implement effective controls to manage technology risks, ensuring they are operating as intended.
• Incident Management: Working with various Cuscal teams lead the response to risk incidents owned by ETS, including root cause analysis and remediation efforts.
• Vendor Risk Assessments: Lead the assessment of third-party technology risks and controls including establishing and maintaining a framework.
• Reporting & Governance: Lead the Technology Risk Committee including preparation of papers, reports, minutes, actions and manage any escalations to Technology Leadership and the Enterprise Risk Committee.
• Focusing on AI and Emerging Technologies: Stay informed about the latest developments in AI and other emerging technologies to proactively identify potential risks. Support Cuscal teams in rapidly adopting new technologies in a safe and controlled manner.
• Controls Automation: Drive initiatives to automate technology risk & controls monitoring processes using advanced tools and technologies.
• Innovation Advocacy: Promote a culture of innovation in risk management practices, encouraging the adoption of new approaches and technologies.

Skills

Technology risk management

Governance & controls

Incident management

Vendor risk management

Analytics & reporting

Education

Bachelor’s degree in information technology, Information Systems, Risk Management, Cybersecurity, Computer Engineering, or a related field

Tools

ITIL

ISO 27001

NIST

COBIT

APRA guidelines CPS234 CPS235 CPS230 CPS220

Job description

At Cuscal, our Commercial and Business teams are the backbone of our organisation. From supporting clients and driving growth to ensuring compliance, managing finances, and fostering a positive workplace culture, our people play a vital role in achieving our commercial objectives while staying true to our values.

If you’re looking for a role where your skills and ideas make a real impact, join us to help shape the future of payments in Australia.

Forward with Cuscal

At Cuscal, our Commercial and Business teams are the backbone of our organisation. From supporting clients and driving growth to ensuring compliance, managing finances, and fostering a positive workplace culture, our people play a vital role in achieving our commercial objectives while staying true to our values.

If you’re looking for a role where your skills and ideas make a real impact, join us to help shape the future of payments in Australia.

Job Description

Your Opportunity

The Senior Manager, Technology Risk plays a critical leadership role in ensuring technology risks are effectively identified, assessed, treated, managed, and monitored across Enterprise Technology Services and the broader Cuscal organisation.

You’ll make an impact by:

• Developing and Enhancing Risk Frameworks: Lead the creation, embedment and continuous improvement of Cuscal-wide technology risk frameworks, policies, and procedures ensuring compliance with relevant APRA and industry standards.
• Embedding Risk Practices: Work collaboratively with product domains and corporate functions to embed technology risk management practices into everyday activities, embed controls, and monitor/report on issues.
• Risk Reporting & Analytics: Own and uplift regular risk reporting mechanisms, including Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs), to provide visibility over technology and data risks to the Board and Executive Leadership Team
• Risk Identification and Assessment: Support ETS teams to identify, assess, and manage risk.
• Risk Mitigation: Support ETS teams in developing and implementing risk mitigation strategies and action plans to address identified risks.
• Issue Management: Support ETS teams in effective issue and action management.
• Controls Implementation & Assurance: Design and implement effective controls to manage technology risks, ensuring they are operating as intended.
• Incident Management: Working with various Cuscal teams lead the response to risk incidents owned by ETS, including root cause analysis and remediation efforts.
• Vendor Risk Assessments: Lead the assessment of third-party technology risks and controls including establishing and maintaining a framework.
• Reporting & Governance: Lead the Technology Risk Committee including preparation of papers, reports, minutes, actions and manage any escalations to Technology Leadership and the Enterprise Risk Committee.
• Focusing on AI and Emerging Technologies: Stay informed about the latest developments in AI and other emerging technologies to proactively identify potential risks. Support Cuscal teams in rapidly adopting new technologies in a safe and controlled manner.
• Controls Automation: Drive initiatives to automate technology risk & controls monitoring processes using advanced tools and technologies.
• Innovation Advocacy: Promote a culture of innovation in risk management practices, encouraging the adoption of new approaches and technologies.

Qualifications

To succeed in this role, you’ll have:

• Bachelor’s degree in information technology, Information Systems, Risk Management, Cybersecurity, Computer Engineering, or a related field.
• Desirable: Certifications in technology, cyber, or data risk management (CRISC, CISA, CISM, CISSP)
• Minimum of 7-10 years of experience in technology risk management within the financial services industry.
• Minimum 3-5 years’ experience in a people leadership role within a technology 1LoD Risk team, Governance team, or 2LoD function.
• Strong knowledge of risk management and IT frameworks and standards such as ITIL, ISO 27001, NIST, COBIT, and relevant APRA guidelines (CPS234, CPG235, CPS230, CPS220)
• Demonstrated experience in managing risks associated with AI, machine learning, and other emerging technologies.

Additional Information

Why Cuscal?

At Cuscal, you’ll experience interesting work that’s transforming. You get the security of an established organisation and the energy of a company committed to innovation. For 60 years, we’ve set the standard in payments, and now we’re preparing to redefine it for the future.

You’ll also enjoy a range of benefits, including:

• Recognition and growth: Celebrate achievements through IGNITE and grow with tailored development opportunities
• Wellbeing focus: We support your physical, mental and financial health with holistic initiatives and access to discounts via Cuscal Advantage
• Inhouse Barista: for whenever you feel like your favourite hot beverage

If you’re excited about this opportunity, we’d love to explore how you can contribute to our vision. Applications may be reviewed as they’re received, so don’t wait - apply now.

Cuscal is an equal opportunity employer committed to creating a diverse, inclusive and barrier-free workplace. We welcome applications from Aboriginal and Torres Strait Islander peoples, people living with disability, LGBTQIA+ communities and individuals from culturally diverse backgrounds.