Tech Risk Executive — 2LoA Strategy & Assurance

Bendigo Bank; Adelaide; Hybrid; AUD 400,000 - 700,000; Full time

Benefits offered by this job

Hybrid work options

Executive development programs

Staff banking privileges

Private health insurance discounts

Wellness subsidies

Job summary

Bendigo Bank is seeking an Executive-level Divisional Chief Risk Officer – Technology to drive strategic risk oversight during rapid technology transformation. The role reports to the CRO and collaborates with the CTO, CISO and Tech Leadership to balance innovation with risk controls.

You will provide independent 2LoA advice, oversee technology risk, cyber security, cloud architecture, data risk and third‑party providers, and regularly engage with the Board and regulators.

Qualifications

• Extensive experience leading Technology Risk, Information Security, or IT Audit in financial services.
• Authoritative knowledge of APRA CPS 234 and CPS 230.
• Experience driving large-scale technology modernisations and cloud implementations.
• Proven ability to influence C-suite and the Board with independent challenge.

Responsibilities

• Shape technology strategies aligned to the Bank’s risk appetite.
• Develop and mature technology and data risk management frameworks.
• Oversee APRA compliance, incident reporting, and root-cause analysis.
• Present insights and assurance to Board, Committees, and Regulators.
• Lead and develop a high-performing risk and compliance team.

Skills

Technology risk leadership

Information security

Regulatory risk

Executive communication

Board engagement

Education

Tertiary degree in Tech/CS/Business/Risk

Postgraduate qualifications

Job description

Bendigo Bank is seeking an Executive-level Divisional Chief Risk Officer – Technology to drive strategic risk oversight during rapid technology transformation. The role reports to the CRO and collaborates with the CTO, CISO and Tech Leadership to balance innovation with risk controls.

You will provide independent 2LoA advice, oversee technology risk, cyber security, cloud architecture, data risk and third‑party providers, and regularly engage with the Board and regulators.