Tech, Cyber & Data Risk Manager - Independent Oversight

CO001 Cuscal Limited; Australia; On-site; AUD 140,000 - 190,000; Full time

Job summary

Cuscal Limited in Australia is seeking an experienced Technology, Cyber & Data Risk Manager to join Group Risk & Compliance. You will provide independent Line 2 oversight across technology, cyber and data risk, and partner with stakeholders to identify, assess and manage risk within the firm's risk appetite.

You will review risk decisions, incidents and control effectiveness, conduct targeted assurance reviews, and support risk reporting to senior management.

Qualifications

• Experience in technology, cyber or operational risk within financial services or payments.
• Solid knowledge of regulatory and compliance requirements (APRA CPS 230, CPS 234, PCI-DSS).
• Familiarity with risk and technology frameworks (AS/NZS ISO 31000, ISO 27001, NIST CSF, COBIT, COSO, ITIL).

Responsibilities

• Provide independent Line 2 oversight across technology, cyber and data risks.
• Partner with stakeholders to identify, assess and manage risk within the risk appetite.
• Review risk decisions, risk acceptances, control effectiveness and risk treatment plans.
• Review incidents, breaches and near misses to identify root causes and remediation.
• Perform targeted assurance reviews across technology, cyber and data controls.
• Support risk reporting to senior management and executives.
• Develop and maintain risk policies, standards and training materials.

Skills

Technology risk

Cyber risk

Data risk

Regulatory knowledge

Stakeholder management

Analytical thinking

Communication skills

Education

Bachelor's degree in risk management/IT/finance

Job description

Cuscal Limited in Australia is seeking an experienced Technology, Cyber & Data Risk Manager to join Group Risk & Compliance. You will provide independent Line 2 oversight across technology, cyber and data risk, and partner with stakeholders to identify, assess and manage risk within the firm's risk appetite.

You will review risk decisions, incidents and control effectiveness, conduct targeted assurance reviews, and support risk reporting to senior management.