Senior Risk Specialist, Technology Risk & Resilience

Australian Prudential Regulation Authority; Sydney; Hybrid; AUD 180,000 - 240,000; Full time

Job summary

The Australian Prudential Regulation Authority (APRA) is seeking a Senior Risk Specialist for Technology to provide strategic risk advice on technology, cyber, AI and resilience risks within the financial sector. You will influence regulated entities and contribute to policy and guidance development in this evolving area.

Based in Sydney, you will lead risk evaluations, work with multiple stakeholders and support APRA’s mission to strengthen the resilience of the Australian financial system.

Qualifications

• Extensive experience in technology, cyber and AI risk management in the financial services sector.
• Experience assessing technology risk governance, incident response and resilience by regulated entities.
• Strong ability to influence senior leaders including C-suite.
• Australian citizen with eligibility for Australian Government security clearance.

Responsibilities

• Provide strategic risk insights and advice to APRA executives on technology, cyber, AI and resilience risks.
• Influence regulated entity decision makers to improve technology and cyber risk practices.
• Keep pace with evolving resilience technologies and their risk implications.
• Develop external networks with government agencies, industry associations and regulated entities.
• Support internal APRA staff with non-technical backgrounds through knowledge transfer.

Skills

Technology risk

Cyber risk

AI risk

Stakeholder influence

Communication

Education

University degree in a relevant field

Job description

The role

The Sydney-based Senior Risk Specialist for Technology is responsible for providing technical and strategic advice concerning current and emerging technology, cyber, AI and resilience risks, including service provider concentration risk issues, and commensurate sound risk management practices. You will play a risk and AI leadership role in assessing technology risk and resilience management practices within regulated entities in the financial sector, providing a unique industry-wide perspective on how emerging technologies are changing risk profiles and supervisory expectations. Participation in the refinement of policy standards and guidance relating to technology, AI and third-party suppliers provides a unique opportunity to influence cross-industry practices and industry change initiatives.

The team

The Non-Financial Risk (NFR) team is responsible for providing identification, insight and supervision strategies for managing non-financial risks including technology risk and resilience at regulated entities and across the financial services system. This includes key risk streams such as Operational Risk and Resilience, Technology and Cyber Security Risks and Resilience, and Governance and Behavioural practices.

The NFR team brings specialist risk knowledge and skills to deliver APRA's mandate and corporate plan in partnership with APRA's frontline supervision, cross industry risk and policy teams to drive strategic outcomes and support strong prudential oversight across Banking, Superannuation and Insurance. Each day is different and the team plays a critical role in ensuring that risks are identified and managed leading to more resilient organisations and a stable financial system.

Key responsibilities

• Bring a dynamic and informed approach to the provision of strategic risk insights and advice to APRA executive leaders on key issues relating to operational risk and resilience practices;
• Successfully influence regulated entity decision makers, as part of APRA's supervision activities, to implement improvements to technology and cyber risk and resilience management practices;
• Keep pace with rapidly developing operational resilience technologies, products and services, with an understanding of how this changes the risk profile;
• Contribute to a high level of awareness across the NFR team in relation to technology and cyber risk and resilience analysis, including knowledge of risk profiles within regulated entities and within the Australian financial system, given the broad range of issues to consider;
• Provide high-quality analytical outputs and insights with a high volume, variety and complexity of work;
• Work with multiple key internal and external stakeholders and teams to partner on strategic uplift initiatives, ensuring that needs and requirements are understood and met;
• Act as an AI thought leader by influencing internal and external stakeholders to identify, understand and address risks arising from the use of AI across regulated entities and the broader financial system;
• Develop external networks to support initiatives including government agencies, industry associations and key positions at regulated entities;
• Provide internal APRA staff, who may have non-technical backgrounds, with additional knowledge; and
• Align with APRA's strategic plan to improve the technology and cyber resilience of the financial system.

About you

• Extensive experience in technology, cyber and AI risk management in the financial services sector;
• Expertise in assessing the management of technology, cyber and AI risk, incident response and operational resilience by APRA regulated entities, such as organisation and governance, risk management frameworks and practices, strategic planning, critical operations identification and management, risk appetite settings including tolerance, service provider/supplier risk management, business continuity management and disaster recovery, outsourcing and assurance;
• Strong communication skills and a proven ability to influence senior leaders including C-suite executives and Board members;
• Extensive experience in dealing with technical experts and representatives of APRA's regulated entities, including on matters relating to emerging technologies and AI;
• Strong personal integrity and an intuitive understanding of what is reasonable and prudent business practice;
• High level of organisation and negotiation skills; and
• Tertiary qualifications in a field relevant to technology, cyber, AI risk and resilience management.

To work with us, you need to be an Australian citizen with eligibility to obtain and maintain Australian Government Security clearance.

About APRA

The Australian Prudential Regulation Authority (APRA) places you at the heart of Australia's financial services industry. APRA serves the Australian community by helping ensure financial institutions deliver on the financial commitments they make, within a stable, efficient and competitive financial system.

At APRA we're committed to providing an inclusive workplace where everyone belongs, feels valued and respected. We aspire to attract and foster diversity of background, thought, and experience, recognising that a broad range of perspectives, approaches and ideas makes us stronger, and better enables us to meet our obligation to protect the financial wellbeing of the Australian community. When applying, please inform us of any adjustments you may need during the interview process.