Senior Technology Risk Leader AI & Controls

Cuscal Limited; Sydney; On-site; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Recognition and growth

Wellbeing focus

Inhouse Barista

Job summary

Cuscal Limited in Sydney invites a Senior Manager, Technology Risk to lead risk identification, assessment, and mitigation across Enterprise Technology Services. You’ll shape frameworks, embed practices, and report to the Board and Executive Leadership Team.

The role focuses on AI and emerging tech risk, incident response, third-party risk, and governance. Minimum 7–10 years in tech risk within financial services, plus 3–5 years in people leadership, with ITIL/ISO/NIST knowledge.

Qualifications

• Bachelor’s degree in information technology, Information Systems, Risk Management, Cybersecurity, Computer Engineering, or a related field.
• Desirable: Certifications in technology, cyber, or data risk management (CRISC, CISA, CISM, CISSP).
• Minimum of 7-10 years of experience in technology risk management within the financial services industry.
• Minimum 3-5 years’ experience in a people leadership role within a technology 1LoD Risk team, Governance team, or 2LoD function.
• Strong knowledge of risk management and IT frameworks and standards such as ITIL, ISO 27001, NIST, COBIT, and relevant APRA guidelines (CPS234, CPG235, CPS230, CPS220).
• Demonstrated experience in managing risks associated with AI, machine learning, and other emerging technologies.

Responsibilities

• Developing and Enhancing Risk Frameworks: Lead the creation, embedment and continuous improvement of Cuscal-wide technology risk frameworks, policies, and procedures ensuring compliance with relevant APRA and industry standards.
• Embedding Risk Practices: Work collaboratively with product domains and corporate functions to embed technology risk management practices into everyday activities, embed controls, and monitor/report on issues.
• Risk Reporting & Analytics: Own and uplift regular risk reporting mechanisms, including Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs), to provide visibility over technology and data risks to the Board and Executive Leadership Team
• Risk Identification and Assessment: Support ETS teams to identify, assess, and manage risk.
• Risk Mitigation: Support ETS teams in developing and implementing risk mitigation strategies and action plans to address identified risks.
• Issue Management: Support ETS teams in effective issue and action management.
• Controls Implementation & Assurance: Design and implement effective controls to manage technology risks, ensuring they are operating as intended.
• Incident Management: Working with various Cuscal teams lead the response to risk incidents owned by ETS, including root cause analysis and remediation efforts.
• Vendor Risk Assessments: Lead the assessment of third-party technology risks and controls including establishing and maintaining a framework.
• Reporting & Governance: Lead the Technology Risk Committee including preparation of papers, reports, minutes, actions and manage any escalations to Technology Leadership and the Enterprise Risk Committee.
• Focusing on AI and Emerging Technologies: Stay informed about the latest developments in AI and other emerging technologies to proactively identify potential risks. Support Cuscal teams in rapidly adopting new technologies in a safe and controlled manner.
• Controls Automation: Drive initiatives to automate technology risk & controls monitoring processes using advanced tools and technologies.
• Innovation Advocacy: Promote a culture of innovation in risk management practices, encouraging the adoption of new approaches and technologies.

Skills

Technology risk management

Governance & controls

Incident management

Vendor risk management

Analytics & reporting

Education

Bachelor’s degree in information technology, Information Systems, Risk Management, Cybersecurity, Computer Engineering, or a related field

Tools

ITIL

ISO 27001

NIST

COBIT

APRA guidelines CPS234 CPS235 CPS230 CPS220

Job description

Cuscal Limited in Sydney invites a Senior Manager, Technology Risk to lead risk identification, assessment, and mitigation across Enterprise Technology Services. You’ll shape frameworks, embed practices, and report to the Board and Executive Leadership Team.

The role focuses on AI and emerging tech risk, incident response, third-party risk, and governance. Minimum 7–10 years in tech risk within financial services, plus 3–5 years in people leadership, with ITIL/ISO/NIST knowledge.