Tech Risk Manager - Cyber, Data & Compliance

Cuscal Limited; Sydney; Vor Ort; AUD 150.000 - 210.000; Vollzeit

Benefits dieser Stelle

Recognition and growth

Wellbeing focus

Diversity and inclusion

Zusammenfassung

Cuscal Limited is seeking an experienced Technology, Cyber & Data Risk Manager to join our Group Risk & Compliance team in Sydney.

You'll provide independent Line 2 oversight across technology, cyber and data risks, partnering with stakeholders to identify, assess and manage risk while offering constructive challenge.

This role requires strong regulatory knowledge and the ability to translate complex risk concepts into clear insights for both technical and non-technical audiences.

Qualifikationen

• Solid experience in technology, cyber or operational risk within financial services or payments.
• Strong knowledge of regulatory requirements including APRA CPS 230 and CPS 234, CPG 235 and PCI-DSS.
• Familiarity with AS/NZS ISO 31000, ISO 27001, NIST CSF, COBIT, COSO and ITIL.

Aufgaben

• Provide independent Line 2 oversight across technology, cyber and data risks.
• Partner with stakeholders to identify, assess and manage risk while providing constructive challenge.
• Review risk decisions, acceptances, control effectiveness and risk treatment plans.
• Review incidents, breaches and near misses to identify root causes and remediation.
• Perform targeted assurance reviews across technology, cyber and data controls.
• Provide independent oversight across major change initiatives including cloud migration and AI projects.

Kenntnisse

Line 2 risk oversight

Technology risk

Cyber risk

Data risk

Regulatory knowledge

Tools

PCI-DSS

ISO 27001

Jobbeschreibung

Cuscal Limited is seeking an experienced Technology, Cyber & Data Risk Manager to join our Group Risk & Compliance team in Sydney.

You'll provide independent Line 2 oversight across technology, cyber and data risks, partnering with stakeholders to identify, assess and manage risk while offering constructive challenge.

This role requires strong regulatory knowledge and the ability to translate complex risk concepts into clear insights for both technical and non-technical audiences.