Technology, Cyber & Data Risk Leader

Cuscal Limited; Sydney; On-site; AUD 150,000 - 190,000; Full time

Benefits offered by this job

Recognition and growth

Wellbeing focus

Diversity and inclusion

Job summary

Cuscal is seeking an experienced Technology, Cyber & Data Risk Manager to join the Group Risk & Compliance team in Sydney. You will provide independent Line 2 oversight across technology, cyber and data risk, partnering with stakeholders to challenge risk decisions and drive effective remediation.

In this role, you’ll review incidents, oversee risk treatment plans and help shape risk policies and training materials for the organisation, enabling secure innovation across digital projects.

Qualifications

• Experience in technology, cyber or operational risk within financial services or payments.
• Strong knowledge of financial services regulatory and compliance requirements, including APRA CPS 230 and CPS 234, CPG 235 and PCI-DSS.
• Familiarity with risk and technology frameworks including AS/NZS ISO 31000, ISO 27001, NIST CSF, COBIT, COSO and ITIL.
• Familiarity with AI standards and regulatory developments including the Australian AI principles and EU AI Act.
• Strong critical thinking, analytical and problem-solving skills.
• The ability to influence senior stakeholders and build strong working relationships.
• Excellent written and verbal communication skills, with the ability to simplify complex risk concepts for different audiences.
• A high degree of initiative, sound judgement and the ability to work autonomously.

Responsibilities

• Providing independent Line 2 oversight across technology, cyber and data risks
• Partnering with stakeholders to identify, assess and manage risk while providing constructive challenge
• Reviewing and challenging risk decisions, risk acceptances, control effectiveness and risk treatment plans
• Reviewing incidents, breaches and near misses to identify root causes and recommend appropriate remediation
• Performing targeted assurance reviews across technology, cyber and data controls
• Providing independent risk oversight across significant change initiatives including technology transformation, cloud migration, AI initiatives and other digital projects
• Identifying and escalating material risks, control deficiencies and emerging risk themes
• Supporting risk reporting to senior management and executives
• Developing and maintaining risk policies, standards and training materials

Skills

Technology risk

Cyber risk

Data risk

Regulatory compliance

APRA CPS 230/234

PCI-DSS

Stakeholder influence

Job description

Cuscal is seeking an experienced Technology, Cyber & Data Risk Manager to join the Group Risk & Compliance team in Sydney. You will provide independent Line 2 oversight across technology, cyber and data risk, partnering with stakeholders to challenge risk decisions and drive effective remediation.

In this role, you’ll review incidents, oversee risk treatment plans and help shape risk policies and training materials for the organisation, enabling secure innovation across digital projects.