Technology Risk Manager: Cyber Governance & Assurance

Priceline; Victoria; On-site; AUD 140,000 - 190,000; Full time

Benefits offered by this job

Team member discounts

Professional development

Novated leasing

Employee Assistance Program (EAP)

Outdoor terrace and facilities

Onsite gym and wellbeing facilities

End of trip facilities

Job summary

Wesfarmers Health is seeking a strategic Technology Risk Manager to join our Cyber Security team. Reporting to the Senior Manager, Cyber Security, you will lead the establishment and ongoing maturity of Wesfarmers Health's technology risk function, shaping governance, assurance and risk oversight across a complex tech environment.

Key responsibilities include defining the risk framework, delivering governance reporting, operationalising risk themes with owners, KRIs and assurance activities, and

Qualifications

• 10+ years in technology or cyber risk management with a track record of uplifting a risk function.
• Experience applying risk assessment methodologies across technology and cyber domains.
• Ability to translate risk into governance language for executives and boards.
• Experience implementing and governing GRC tooling and risk reporting frameworks.
• Knowledge of ISO 27001, NIST CSF, PCI DSS and Privacy Act alignment.

Responsibilities

• Define and implement the technology risk framework and taxonomy.
• Establish technology risk reporting for governance forums and senior stakeholders.
• Operationalise risk themes with ownership, controls, KRIs and assurance activities.
• Drive remediation of material risks and control gaps with accountable owners.
• Lead control testing, assurance activities and evidence standards.
• Oversee implementation and evolution of GRC tooling.
• Ensure alignment with ISO 27001, NIST CSF, PCI DSS and Privacy Act.
• Prepare technology risk reporting for executive leadership and governance forums.
• Provide independent challenge and escalation of material risk decisions.

Skills

Technology risk management

GRC tooling

ISO 27001

NIST CSF

PCI DSS

Executive reporting

Education

Tertiary qualification in Risk Management or IT or Cyber Security

Tools

GRC tooling

Job description

Wesfarmers Health is seeking a strategic Technology Risk Manager to join our Cyber Security team. Reporting to the Senior Manager, Cyber Security, you will lead the establishment and ongoing maturity of Wesfarmers Health's technology risk function, shaping governance, assurance and risk oversight across a complex tech environment.

Key responsibilities include defining the risk framework, delivering governance reporting, operationalising risk themes with owners, KRIs and assurance activities, and