Senior Analyst - Technology Risk Transformation & Governance (Line 1 - max term2 years)

ASX Limited; Australia Landing (MS); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid working options

Background checks during onboarding

Job summary

ASX Limited is seeking a professional to support technology risk uplift and governance across the Technology division. You will work with stakeholders across Cyber Security, IT Service Management, and Engineering to design, implement, and track controls and policy alignment.

The role involves translating requirements into practical outputs, maintaining policy frameworks, and contributing to risk maturity across regulated environments. Flexible/hybrid working options are offered.

Qualifications

• Experience supporting technology risk, controls or transformation initiatives.
• Experience with control uplift or implementation in technology and cyber domains (IAM, Cloud, DevOps, Data Centre).
• Strong understanding of how controls operate in technology environments and translating requirements into practical implementation.
• Experience delivering in complex, evolving delivery environments with multiple stakeholders.
• Ability to translate requirements into practical outputs (templates, guides, implementation approaches).
• Strong stakeholder engagement and communication across technology teams.

Responsibilities

• Support the delivery of technology risk uplift initiatives and IT General Controls library rollout.
• Track governance, planning, progress, dependencies, risks, and milestones for technology risk uplift initiatives.
• Collaborate with Cyber Security, IT Service Management and Engineering to design and uplift controls.
• Create practical templates, guidance, and artefacts to enable consistent implementation.
• Maintain and update the technology policy framework with policy owners and align to the ASX Risk Taxonomy.
• Assist with uplift to IT Service Criticality methodology and related artefacts.

Skills

Technology risk

Controls implementation

Stakeholder engagement

Governance

Regulatory awareness

Cyber security awareness

Education

CISA

CISSP

AWS Certification

Tools

JIRA

Job description

ASX: Powering Australia's financial markets

Why join the ASX?

When you join ASX, you’re joining a company with a strong purpose – to power a stronger economic future by enabling a fair and dynamic marketplace for all.

In your new role, you’ll be part of a leading global securities exchange with a strong brand.

We are known for being a trusted market operator and an exciting data hub.

We are more than a securities exchange!

The ASX team brings together talented people from a diverse range of disciplines. We run critical market infrastructure, with 1 in 3 people employed within technology. Yet we have a unique complexity of roles across a range of disciplines such as operations, program delivery, financial products, investor engagement, risk and compliance.

We’re proud to foster a workplace where diversity is celebrated and inclusion is part of our everyday culture. Our employee-led networks champion LGBTIQ+ inclusion, promote gender equality, accessibility and wellbeing, inspire giving and volunteering, and celebrate cultural and religious events, creating a sense of belonging for all. As an AWEI Bronze employer and member of the Champions of Change Coalition for gender equality, we’re committed to a fair and inclusive workplace where everyone can thrive.

Your Team

The Technology Risk, Business Management & Strategy function supports the ASX Technology division across technology risk, governance, planning and operating‑rhythm activities. The function enables Technology leaders to manage risk, meet regulatory and assurance expectations, and maintain effective governance and performance disciplines.

Your responsibilities

• Support the delivery of technology risk uplift initiatives, including the rollout of the IT General Controls library across the organisation.
• Support governance, planning and execution tracking, including monitoring progress, dependencies, risks and key milestones across technology risk uplift initiatives.
• Partner with technology stakeholders across key domains (e.g. Cyber Security, IT Service Management, Engineering) to support and advise on the design and uplift of controls, ensuring they are practical, implementable and aligned to requirements, driving improved control effectiveness.
• Translate key concepts, plans and requirements into practical templates, guidance, education materials and artefacts, supporting consistent implementation and understanding across the division.
• Support the uplift and ongoing maintenance of the technology policy framework, including working with policy owners to ensure control requirements and obligations are appropriately embedded within policies, standards and supporting artefacts, and aligned to the ASX Risk Taxonomy.
• Support broader initiatives such as uplift to the IT Service Criticality methodology, contributing to design, artefact development, implementation approach and rollout support where required.

Your experience and qualifications

Must have

• Demonstrated experience supporting technology risk, controls or transformation initiatives.
• Experience with control uplift or implementation activities, with an understanding of how controls are designed and embedded in practice, particularly for technology and cyber domains (e.g. Identity & Access, Cloud, DevOps, Data Centre).
• Strong understanding of how controls operate within technology environments, including the ability to work directly with technical stakeholders and translate requirements into practical implementation approaches.
• Ability to operate within complex, evolving delivery environments, supporting governance, planning and execution tracking and delivery across multiple stakeholders and initiatives.
• Ability to translate requirements and approaches into practical outputs, including templates, guides, and implementation approaches.
• Strong stakeholder engagement and communication skills, with the ability to work collaboratively across technology teams to support adoption and uplift of controls.

Nice to have

• Experience with risk transformation initiatives (e.g. design frameworks and approaches, support implementation and embedment, uplift risk maturity, etc.).
• Experience using work tracking tools (e.g. JIRA) to manage, track and report on initiatives and work progression.
• Exposure to technology policies and standards, including drafting frameworks and/or supporting their operationalisation.
• Experience working within regulated environments.
• Relevant risk or technology certification (CISA, CISSP, AWS) or equivalent professional experience.
• Familiarity with recognised technology and risk frameworks such as NIST, ITIL, COBIT or COSO.

We make hiring decisions based on your skills, capabilities and experience, and how you’ll help us to live our values.

At ASX Group, our diverse workforce is essential to build and maintain a fair and dynamic marketplace.

We support flexible working and offer hybrid working options.

Even if our roles are advertised as full-time, we encourage you to apply if you are interested in part-time or other flexible working arrangements.

We will arrange for successful candidates to have background checks, including reference and police checks, completed as part of the on-boarding process.

To be considered for this position, candidates must be legally authorised to work in Australia on a permanent basis without any restrictions.