Senior Manager Technology Risk Strategy

ASX Limited; Australia Landing (MS); Hybrid; USD 125,000 - 181,000; Full time

Job summary

ASX Group is seeking a senior Line 1 Technology Risk leader to translate enterprise risk standards into a coherent technology risk taxonomy and control environment. You will own risk strategy and ensure scalable risk management, assurance and regulatory outcomes across technology and cyber risk.

In this role you will coach a team of risk practitioners, develop guidance and education, and drive simplification and standardisation across the risk ecosystem.

Qualifications

• Significant experience in technology risk or compliance roles with senior leadership autonomy.
• Proven ability to set Line 1 Technology Risk Strategy.
• Ability to translate enterprise risk standards into technology practices across complex environments.
• Strong tech and cyber risk expertise with depth to engage SMEs.
• Proven artefact development (taxonomies, libraries, assessments).

Responsibilities

• Own and lead the Line 1 technology risk strategy including controls and frameworks.
• Design, evolve and govern risk taxonomy, metrics and control frameworks.
• Develop new risk and control approaches where gaps exist.
• Own the ITGC library, artefacts, changes and assurance activities.
• Evolve integrated IT system-level risk reporting towards data-driven outputs.
• Provide authoritative Line 1 input into enterprise risk frameworks.
• Lead development of guidance, playbooks and education for the division and enterprise risk.
• Drive uplift of the technology risk ecosystem through simplification and standardisation.
• Lead, coach and support a risk practitioners team.

Skills

Technology risk

Cyber risk

Leadership

Stakeholder management

Risk assessment

Education

CISA certification

CISSP certification

NIST/COSO familiarity

Tools

NIST

ITIL

COSO

Job description

ASX: Powering Australia's financial markets

Why join the ASX?

When you join ASX, you’re joining a company with a strong purpose – to power a stronger economic future by enabling a fair and dynamic marketplace for all. In your new role, you’ll be part of a leading global securities exchange with a strong brand. We are known for being a trusted market operator and an exciting data hub.

We are more than a securities exchange! The ASX team brings together talented people from a diverse range of disciplines. We run critical market infrastructure, with 1 in 3 people employed within technology. Yet we have a unique complexity of roles across a range of disciplines such as operations, program delivery, financial products, investor engagement, risk and compliance. We’re proud to foster a workplace where diversity is celebrated and inclusion is part of our everyday culture. Our employee-led networks champion LGBTIQ+ inclusion, promote gender equality, accessibility and wellbeing, inspire giving and volunteering, and celebrate cultural and religious events, creating a sense of belonging for all. As an AWEI Bronze employer and member of the Champions of Change Coalition for gender equality, we’re committed to a fair and inclusive workplace where everyone can thrive.

Key purpose of the role

Act as the senior Line 1 owner of Technology Risk Strategy for ASX, translating enterprise risk frameworks into a coherent technology risk taxonomy, control environment and assessment approach that supports scalable risk management, assurance and regulatory outcomes.

Your Team

The Technology Risk, Business Management & Strategy function supports the ASX Technology division across technology risk, governance, planning and operating-rhythm activities. The function enables Technology leaders to manage risk, meet regulatory and assurance expectations, and maintain effective governance and performance disciplines.

Your responsibilities

• Own and lead the Line 1 technology risk strategy including controls enablement capability, determining how enterprise risk & compliance frameworks are translated into practical, scalable and ASX Technology divisional, as well as technology and cyber risk specific approaches.
• Design, evolve and govern the technology and cyber risk ecosystem of taxonomies, metrics, control frameworks, policies and assessment approaches, ensuring they are and remain coherent, usable, aligned to internal and external expectations, and informed by best practice.
• Develop new risk and control approaches where gaps exist, including defining trade-state practices, implementation plans, guidance and transition pathways, in alignment to enterprise risks and compliance, to uplift maturity.
• Own the ITGC library, including maintaining artefacts, facilitating changes, coordinating control rollout and assurance activities.
• Evolve integrated IT system-level risk reporting towards data driven outputs considering risk maturity.
• Provide authoritative Line 1 input into enterprise frameworks, such as risk & compliance as well as criticality tiering methodologies, ensuring divisional as well as technology and cyber risk considerations are accurately reflected and grounded in operational reality.
• Lead the development of guidance, playbooks and education for the division and for technology and cyber risk across the enterprise, lifting understanding and capability so risk and controls are embedded into day-to-day technology delivery and operations.
• Drive continual uplift of the technology risk ecosystem through simplification, standardisation, automation and clear ownership.
• Lead, coach and support a team of risk practitioners in an environment with competing priorities and elevated risk exposure, building autonomy, reducing single-point dependencies, and progressively uplifting risk maturity through practical simplification and standardisation.

Your experience and qualifications

Must have

• Significant experience in technology risk and/or compliance roles (Line 1, Line 2 or Line 3), with the credibility and judgement to operate autonomously in a senior Line 1 leadership capacity.
• Demonstrated experience in setting Line 1 Technology Risk Strategy.
• Demonstrated ability to translate enterprise risk standards and frameworks into fit-for-purpose technology practices, and to operationalise and embed them consistently across complex environments.
• Strong technology and cyber risk expertise, with sufficient technical depth to engage credibly with SMEs such as engineers and cyber practitioners, and to design practical risk and control approaches grounded in operational reality.
• Proven capability to develop, own and evolve risk and control artefacts (e.g. taxonomies, libraries, assessment approaches), maintaining coherence, usability and scalability as the environment changes.
• Demonstrated ability to exercise sound risk judgement at system level, including determining what good looks like at scale, making trade-offs, incorporating feedback and adapting approaches to enable consistency and usability.
• Strong leadership capability in ambiguous and evolving environments, including structuring work, setting direction, prioritising effort and driving outcomes without reliance on established templates or structures.
• People leadership capability, demonstrated through direct, indirect or matrix leadership, including coaching and developing experienced practitioners and building confidence, judgement and autonomy in others.

Nice to have

• Experience operating in regulated, critical or high-reliability environments, where technology and cyber risk scrutiny is elevated.
• Risk-related certification (CISA, CISSP, etc.) or equivalent professional standing.
• Familiarity with recognised technology and risk frameworks such as NIST, ITIL, COSO.
• Exposure to emerging technology risk areas such as AI, cloud at scale, continuous deployment.

We make hiring decisions based on your skills, capabilities and experience, and how you’ll help us to live our values.

At ASX Group, our diverse workforce is essential to build and maintain a fair and dynamic marketplace. We support flexible working and offer hybrid working options. We will arrange for successful candidates to have background checks, including reference and police checks, completed as part of the on-boarding process.

To be considered for this position, candidates must be legally authorised to work in Australia on a permanent basis without any restrictions.