Senior Technology Controls Analyst — Risk & Compliance (9-Month)

The Star Entertainment Group; Sydney; On-site; AUD 90,000 - 130,000; Full time

Benefits offered by this job

Complimentary meals on site

Discounted parking

Restaurant & accommodation discounts (

Diversity & Inclusion focus

Job summary

The Star Sydney is seeking a Technology Controls Senior Analyst to join the Risk and Compliance team on a 9-month contract. Reporting to the Technology Controls Manager, you will perform defined controls testing focused on technology controls and help ensure regulatory compliance and risk management.

You will conduct walkthroughs, execute control testing, and escalate technology, cyber and data risk issues to governance forums, working independently and with stakeholders to strengthen the

Qualifications

• Minimum 3 years’ experience in technology risk management.
• Knowledge of audit and assessment standards (e.g. CISA, CRISC)
• Strong governance and stakeholder management skills
• Familiarity with cyber security frameworks (e.g. NIST, Essential 8, ISO 27000, PCI DSS)

Responsibilities

• Conduct walkthroughs to identify, document, and assess technology, cyber, and data risks, including obligations and controls
• Execute control testing to evaluate effectiveness, residual risk, and compliance with frameworks and regulations
• Support stakeholders in enhancing obligations and controls to strengthen the risk environment
• Escalate key technology, cyber, and data risk issues to relevant governance forums

Skills

Technology risk

Governance

Stakeholder management

Problem solving

Independent work

Tools

NIST framework

Essential 8

ISO 27000

PCI DSS

Job description

The Star Sydney is seeking a Technology Controls Senior Analyst to join the Risk and Compliance team on a 9-month contract. Reporting to the Technology Controls Manager, you will perform defined controls testing focused on technology controls and help ensure regulatory compliance and risk management.

You will conduct walkthroughs, execute control testing, and escalate technology, cyber and data risk issues to governance forums, working independently and with stakeholders to strengthen the