IT Risk & Compliance Manager
Core
Establishes and maintains the organization's IT Risk control framework, drives alignment with regulatory standards, and mitigates technology risks.
Role type
IT Risk & Compliance Manager
Builds
IT risk control frameworks, audit programs, disaster recovery plans, and risk reporting metrics
Domain
Financial services, insurance, superannuation, and highly regulated corporate environments
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
IT audit, IT risk management, IT compliance, regulatory standards alignment, control assurance testing, business continuity planning, disaster recovery, third-party risk assessment, KRI development, stakeholder engagement
Preferred skills
Strategic thinking, root cause analysis, complex environment navigation, simultaneous program delivery
Technologies
ASAE 3402, ISO 27001, APRA CPS 230, CPS 234, CPS 230
Responsibilities
Support design and implementation of Risk Management Framework; Maintain technology and operational control frameworks; Embed risk and controls into IT systems; Identify, assess, and monitor IT and cyber risks; Support compliance with regulatory requirements; Support internal and external audits; Support design and maintenance of Business Continuity Plans; Conduct risk assessments on third-party vendors; Develop and maintain Key Risk Indicators; Deliver data-driven risk reporting to senior management
Seniority
Mid-Senior, hands-on IC
