Tech & Cyber Risk Specialist - Controls & Assurance

BCU Bank; Brisbane; Hybrid; AUD 110,000 - 140,000; Full time

Benefits offered by this job

Flexible work arrangements

Leadership & professional development

Education assistance

Mentoring

Discounts on banking products

Incentive scheme with extra leave

Parental leave (12 weeks)

Volunteer leave (2 days)

Social clubs in Perth & Coffs Harbour

Job summary

P&N Group is seeking a Technology & Cyber Line 1 Risk Specialist to strengthen risk management practices within its Cyber Security team. You will partner across Infrastructure, Cyber Security and Risk to conduct risk assessments, control testing and third-party reviews, translating complex tech risk into clear business implications.

The role emphasizes practical risk guidance, training delivery, and maintaining risk records while supporting remediation actions and incident responses.

Qualifications

• Experience in cyber, technology or operational risk in a medium to large organisation.
• Strong knowledge of risk management principles, control design and operating effectiveness.
• Familiarity with CPS 230 and CPS 234 in a regulated environment.
• Ability to translate technical information into clear business risk implications.
• Experience conducting control testing or control assessments and remediation tracking.
• Pragmatic, collaborative approach with sound judgement and autonomy.

Responsibilities

• Apply the Bank’s Risk Management Framework across Technology and Cyber and strengthen risk and control management.
• Facilitate technology and cyber risk assessments, including RCSAs and third-party providers.
• Plan and perform control testing, document findings and support remediation actions.
• Coordinate KRI reporting and analyse risk trends and emerging issues.
• Review risks with new systems, change programs and third-party services.
• Provide practical risk guidance to tech and business stakeholders.
• Support incident recording, assessment and follow-up within enterprise risk system.
• Develop and deliver risk awareness training across Technology and Cyber teams.

Skills

Cyber risk

Technology risk

Risk management

Control testing

RCSA experience

KRI reporting

Communication of risk

Job description

P&N Group is seeking a Technology & Cyber Line 1 Risk Specialist to strengthen risk management practices within its Cyber Security team. You will partner across Infrastructure, Cyber Security and Risk to conduct risk assessments, control testing and third-party reviews, translating complex tech risk into clear business implications.

The role emphasizes practical risk guidance, training delivery, and maintaining risk records while supporting remediation actions and incident responses.