Senior Technology Risk Leader — AI & Governance

Cuscal Limited; Sydney; On-site; AUD 180,000 - 250,000; Full time

Benefits offered by this job

Recognition and growth

Wellbeing focus

Inhouse Barista

Job summary

Cuscal Limited in Sydney is seeking a Senior Manager, Technology Risk to lead identification, assessment, treatment and monitoring of technology risks across Enterprise Technology Services. You will embed risk practices, manage issues, and report KRIs/KPIs to the Board and Executive Leadership.

You will drive risk frameworks, incident response, vendor risk and controls, while staying ahead of AI and emerging tech risks with a proactive governance approach.

Qualifications

• Bachelor's degree in information technology, information systems, risk management, cybersecurity, or related field.
• Certifications in technology risk (CRISC, CISA, CISM, CISSP).
• 7–10 years in technology risk management within financial services.
• 3–5 years in a people leadership role in a risk/governance function.
• Strong knowledge of IT risk frameworks including ITIL, ISO 27001, NIST, COBIT and APRA guidelines.

Responsibilities

• Lead development and embedment of technology risk frameworks, policies and procedures.
• Embed risk practices across products and functions; monitor issues and controls.
• Own risk reporting, KRIs and KPIs for visibility to Board and ELT.
• Support risk identification, assessment and mitigation for ETS teams.
• Design and implement controls; oversee incident response and root cause analysis.
• Lead vendor risk assessments and third-party risk governance.
• Drive automated risk monitoring and stay ahead on AI risk developments.

Skills

Technology risk leadership

Risk management

Stakeholder management

Communication

Education

Bachelor's degree in IT / related field

CRISC

CISA

CISM

CISSP

Tools

ITIL

ISO 27001

NIST

COBIT

APRA CPS234

APRA CPS235

APRA CPS230

APRA CPS220

Job description

Cuscal Limited in Sydney is seeking a Senior Manager, Technology Risk to lead identification, assessment, treatment and monitoring of technology risks across Enterprise Technology Services. You will embed risk practices, manage issues, and report KRIs/KPIs to the Board and Executive Leadership.

You will drive risk frameworks, incident response, vendor risk and controls, while staying ahead of AI and emerging tech risks with a proactive governance approach.