Technology Risk Manager

Financial Services | Sydney | Contract

Location

Sydney, NSW (hybrid)

Engagement

Contract

Reports to

Head of Technology Risk / CRO

Team

Risk & Compliance

Role Purpose

The Technology Risk Manager will lead the identification, assessment and management of technology-related risks across the organisation, ensuring the technology risk framework aligns with regulatory expectations (including APRA CPS 230/234) and supports resilient, secure delivery of technology services.

Key Responsibilities

• Own and maintain the technology risk framework, including risk appetite, taxonomy and control library
• Lead technology risk assessments across change initiatives, third-party/vendor arrangements and BAU platforms
• Partner with Technology, Cyber Security and Operational Risk teams to identify emerging risks and control gaps
• Manage the technology risk and control self-assessment (RCSA) process, including issue and action tracking
• Prepare risk reporting and papers for Risk Committee, Board and regulators
• Support regulatory engagement and audits relating to technology risk, resilience and outsourcing
• Provide advisory support to technology and business stakeholders on risk-based decision making
• Monitor the external threat and regulatory landscape (APRA, ASIC) and translate changes into framework updates

Skills & Experience

• 5+ years' experience in technology risk, IT audit or operational risk within financial services
• Strong working knowledge of APRA prudential standards (CPS 230, CPS 234) and technology risk frameworks
• Experience running RCSAs, risk assessments and control testing
• Proven stakeholder management skills across Technology, Risk and Executive audiences
• Strong report writing skills, including Board and Risk Committee papers
• Relevant tertiary qualification in a related discipline

Desirable

• Certification such as CRISC, CISA or CISSP
• Experience with third-party/vendor risk and outsourcing arrangements
• Prior experience in a bank, insurer or wealth management environment
• Exposure to cloud risk and resilience frameworks

By clicking 'apply', you give your express consent that Robert Half may use your personal information to process your job application and to contact you from time to time for future employment opportunities. For further information on how Robert Half processes your personal information and how to access and correct your information, please read the Robert Half privacy notice: https://www.roberthalf.com/au/en/privacy. Please do not submit any sensitive personal data to us in your resume (such as government ID numbers, ethnicity, gender, religion, marital status or trade union membership) as we do not collect your sensitive personal data at this time.