Technology and Cyber Risk Business Partner | Senior Manager | Risk & Ethics

PwC Australia; Adelaide; On-site; AUD 140,000 - 190,000; Full time

Benefits offered by this job

Floating public holidays

Birthday leave

Parental leave up to 26 weeks

Purchase of additional leave

Job summary

PwC Australia is seeking a Risk Business Partner for Technology and Cyber to act as the dedicated Line 2 risk adviser. You will help leaders understand, own and actively manage technology, cyber, data and emerging technology risks, translating priorities into consistent execution and decision‑ready insights.

You will partner with Technology and Cyber leaders, support first line risk ownership, perform hands‑on risk work, review control design and operating effectiveness, and contribute to

Qualifications

• Experience in Line 2 risk, technology risk, cyber risk, or risk programme delivery.
• Practical understanding of technology controls and risk management.
• Ability to translate complex findings into actionable guidance.
• Strong communication with senior stakeholders and governance forums.
• Experience in a professional services or partnership environment is a plus.

Responsibilities

• Partner with Technology and Cyber leaders as a trusted Line 2 risk adviser on risk profiles and control environments.
• Support first line to identify, assess, monitor and manage technology, cyber, data and AI risks.
• Undertake risk work including risk assessments, control reviews, and post‑incident reviews.
• Assess design and operating effectiveness of key technology controls and address gaps.
• Review risk implications for new or changed technology and third‑party arrangements.
• Provide Line 2 oversight of policies, frameworks and procedures across the team.
• Collaborate with data security, AI, continuity planning and regulatory compliance specialists.
• Translate enterprise risk priorities into practical delivery and reporting.
• Prepare clear, decision‑ready insights for senior stakeholders and governance forums.

Skills

Line 2 risk experience

Technology risk

Cyber risk

Risk partnering

Control assessment

Stakeholder communication

Risk governance reporting

Education

Degree in IT / cyber / risk

CRISC / CISM / CISSP desirable

Tools

GRC platforms

Job description

Trusted risk advice is built through sound judgement, practical insight and constructive challenge. As the Risk Business Partner for Technology and Cyber at PwC, you’ll be the dedicated Line 2 risk adviser to the firm’s Technology and Cyber team, helping leaders understand, own and actively manage technology, cyber, data and emerging technology risks. You’ll combine enterprise risk business partnering expertise with a practical understanding of technology controls, translating enterprise priorities into consistent execution and decision‑ready insights.

Why PwC?

At PwC Australia, your skills meet purpose. We tackle big challenges across industries like finance, technology, energy, and health, giving you the chance to make a real impact. Here, your growth is our priority. You’ll work with leading teams, explore new technologies, and unlock your full potential.

Join a global community of more than 370,000 people who value bold ideas, collaboration, and lasting change. Together, we’re building trust and shaping the future.

What you’ll do:

• Partner with Technology and Cyber leaders as their trusted Line 2 risk adviser, providing practical support, independent oversight and constructive challenge on risk profiles, control environments and risk management practices.
• Support the first line to identify, assess, monitor and manage technology, cyber, data and AI‑related risks, while maintaining clear accountability for first‑line ownership.
• Undertake hands‑on risk work, including risk assessments, control reviews, deep dives, root‑cause analysis and reviews of issues, incidents, assurance outcomes, risk appetite metrics and guardrails.
• Assess the design and operating effectiveness of key technology, cyber and data controls, identify gaps and provide pragmatic recommendations that strengthen the control environment.
• Review risk and control implications for new or materially changed technology, products, services and third‑party arrangements, including due diligence and risk acceptance considerations.
• Provide Line 2 oversight of technology and cyber policies, frameworks, standards and procedures, and support their consistent application across the Technology and Cyber team.
• Partner with relevant specialists on data security, AI and GenAI, business continuity, incident and cyber crisis readiness, regulatory compliance and third‑party risk.
• Support incident and post‑incident reviews by assessing control breakdowns, root causes, lessons learned and the adequacy of remediation plans.
• Translate Enterprise Risk priorities into practical delivery, coordinating agreed activities, tracking progress and integrating risk insights into a coherent view for the Technology and Cyber portfolio.
• Prepare clear, consistent and decision‑focused insights for senior stakeholders and governance forums, including reporting on control effectiveness, issues, remediation, assurance and risk appetite.

What we’re looking for:

Core Skills

• Strong experience in Line 2 risk, technology risk, cyber risk, internal audit, business partnering, enterprise risk transformation or risk programme delivery in a complex, multi‑stakeholder environment.
• A practical understanding of technology controls and how they mitigate risks across areas such as identity and access management, change management, IT operations, vulnerability management, security monitoring, data protection, resilience and third‑party technology services.
• A deep understanding of risk management frameworks and practices, including risk assessment, controls, issues, incidents, assurance and risk appetite, together with experience operating within the Three Lines of Accountability.
• The ability to assess control design and operating effectiveness, identify risk themes and translate technical findings into proportionate, actionable recommendations.
• Proven ability to influence and constructively challenge senior stakeholders, strengthening risk ownership and accountability without relying on formal authority.
• Strong written and verbal communication skills, with the ability to explain complex technology and cyber risk concepts clearly to technical and non‑technical audiences.
• The ability to synthesise risk, controls and assurance information into concise, decision‑ready insights and executive‑level reporting.

Desirable Skills

• Experience partnering directly with a Technology, Cyber, Data or digital function and working collaboratively with technical subject matter experts.
• Knowledge of recognised technology and cybersecurity frameworks and standards, such as NIST Cybersecurity Framework, COBIT and ISO/IEC 27001.
• Experience with data security, AI or GenAI risk, cyber incident or crisis management, third‑party risk and technology‑related regulatory or compliance requirements.
• Experience supporting senior management or Board‑level governance and working with GRC platforms, risk data or dashboards.
• Experience in a professional services or partnership environment.
• A relevant degree in information technology, computer science, cyber security, risk or a related field. Relevant certifications such as CRISC, CISM or CISSP are highly desirable.

What you’ll gain:

• The opportunity to work at the intersection of enterprise risk, technology and cyber security and influence the firm’s technology and cyber risk agenda.
• Work within an inclusive environment committed to Inclusion and Diversity and First Nations Prosperity, ensuring diverse perspectives are at the forefront of our work.
• Flexibility means trusting you to choose when, where, and how you work, balancing what’s best for you, your team, and your clients to grow and thrive together.
• Clear paths for career progression supported by continuous learning and leadership development.
• Generous leave entitlements to support your work‑life balance, including floating public holidays, birthday leave and the ability to purchase additional leave on top of your four weeks.
• A world‑class parental leave policy offering up to 26 weeks of leave for caregivers, supporting your family and personal life.
• We know that perks are as important as your financial rewards. Explore all the benefits that PwC has to offer here.

We’re committed to treating all our job applicants fairly and with respect, irrespective of their actual or assumed background, disability, neurodivergence, or any other protected characteristic and to maintaining a safe, respectful workplace for everyone. We want you to have every opportunity to thrive in our selection process. In the application form, you can let us know what adjustments you require during our recruitment process and/or any workplace accommodations you anticipate needing to help you perform your role.

No agencies please: We kindly request that recruitment agencies do not submit CVs in response to this advertisement. We are only accepting applications directly from individuals.