Manager - Technology, Cyber & Data Risk
Core
Provide independent Line 2 oversight, review, and challenge across technology, cyber security, and data risk to help the organization operate within its risk appetite.
Role type
Senior IC risk manager (technology, cyber & data)
Builds
Risk oversight for technology transformation, cloud migration, AI initiatives, and digital projects
Domain
Financial services / Payments / Cybersecurity
Deliverable
dashboards & analysis
Required skills
Technology risk assessment, Cybersecurity risk management, Data risk governance, Regulatory compliance (APRA CPS 230/234/235, PCI-DSS), Risk frameworks (ISO 31000, ISO 27001, NIST CSF, COBIT, COSO, ITIL), Incident root cause analysis, Risk reporting to executives
Preferred skills
AI standards and regulatory knowledge, Change management oversight
Technologies
NIST CSF, COBIT, COSO, ITIL, APRA CPS 230, CPS 234, CPG 235, PCI-DSS
Responsibilities
Review and challenge risk decisions, risk acceptances, control effectiveness, and risk treatment plans; Review incidents, breaches, and near misses to identify root causes; Perform targeted assurance reviews across technology, cyber, and data controls; Identify and escalate material risks and control deficiencies; Support risk reporting to senior management and executives; Develop and maintain risk policies, standards, and training materials
Seniority
Senior, hands-on IC
