Senior Technology Risk Specialist

M&T Resources; Brisbane; Hybrid; AUD 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid working environment

Job summary

M&T Resources is seeking an experienced Technology Risk professional to partner with Technology teams, assess operational and technology risks across projects, technology change initiatives and BAU operations, and support risk assessments.

You will contribute to risk profiles, risk appetite measures and key risk indicators, support control design and incident management, assist with regulatory obligations, and engage with senior stakeholders in a hybrid working environment.

Qualifications

• Experience in Technology/IT Risk, Governance or Assurance environments.
• Strong understanding of risk frameworks, controls and reporting.
• Experience supporting risk assessments, incident management and remediation.
• Knowledge of project/technology change risk and transformation programs.
• Exposure to regulated industries such as financial services or utilities is highly regarded.
• Understanding of CPS230/CPS234 advantageous.

Responsibilities

• Partner with Technology teams to identify and assess operational and technology risks.
• Support risk assessments across projects, technology change initiatives and BAU operations.
• Monitor risk treatment actions and remediation plans, escalating material risks where required.
• Contribute to risk profiles, risk appetite measures and key risk indicators.
• Support control design, control assessments and control effectiveness activities.
• Assist with incident management, issue remediation and root cause analysis.
• Provide risk input into technology projects, transformations and strategic initiatives.
• Support third-party and service provider risk assessments and ongoing monitoring activities.
• Prepare governance reporting, risk papers and management updates for senior stakeholders and committees.
• Assist with compliance assessments and regulatory obligations relevant to technology and operational resilience.

Skills

Technology Risk Experience

IT Risk

Governance

Regulatory Compliance

APRA CPS230 CPS234

GRC

Incident Management

Third Party Risk

Business Continuity

Hybrid Working

Job description

• Partner with Technology teams to identify and assess operational and technology risks.
• Support risk assessments across projects, technology change initiatives and BAU operations.
• Monitor risk treatment actions and remediation plans, escalating material risks where required.
• Contribute to the development and maintenance of risk profiles, risk appetite measures and key risk indicators.
• Support control design, control assessments and control effectiveness activities.
• Assist with incident management, issue remediation and root cause analysis.
• Provide risk input into technology projects, transformations and strategic initiatives.
• Support third-party and service provider risk assessments and ongoing monitoring activities.
• Prepare governance reporting, risk papers and management updates for senior stakeholders and committees.
• Assist with compliance assessments and regulatory obligations relevant to technology and operational resilience.

About You

• Experience within Technology Risk, IT Risk, Operational Risk, Governance, Compliance or Assurance environments.
• Strong understanding of risk frameworks, controls, governance processes and risk reporting.
• Experience supporting risk assessments, issue management, incident management and remediation tracking.
• Knowledge of project risk, technology change risk or transformation programs.
• Experience working with technology stakeholders, delivery teams and senior business leaders.
• Exposure to regulated industries such as financial services, banking, insurance, superannuation or utilities is highly regarded.
• Understanding of APRA prudential standards including CPS 230 and CPS 234 will be advantageous.
• Technology Governance, Risk and Compliance (GRC)
• Operational Resilience
• Third Party Risk Management
• IT Controls
• Risk in Change
• Incident and Problem Management
• Business Continuity and Disaster Recovery
• Cyber Risk
• Regulatory Compliance
• Hybrid working environment
• Exposure to large-scale technology and transformation initiatives
• Strong stakeholder engagement across technology and business teams
• Opportunity to contribute to enterprise risk and resilience uplift programs
• Collaborative and inclusive culture focused on continuous improvement