Manager Technology Risk
Core
Provide independent oversight, guidance, and constructive challenge on technology and operational risk controls within a bank's Second Line of Accountability.
Role type
Manager, Technology Risk (2LoA)
Builds
Robust risk management frameworks and resilient IT/InfoSec controls
Domain
Banking / Financial Services / Technology Risk
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
risk-based control assurance, independent technology risk assessments, 2LoA challenge, regulatory framework knowledge (APRA CPS 234/230), ISO 27001/NIST/COBIT familiarity, third-party risk analysis, systems thinking
Preferred skills
CISA, CRISC, or Security+ certifications, experience in IT audit or information security assurance
Technologies
APRA CPS 234, APRA CPS 230, ISO 27001, NIST, COBIT
Responsibilities
Perform risk-based control assurance and targeted deep-dive reviews of technology controls, provide objective 2LoA challenge on technology change initiatives and incident responses, analyze complex technology risk matters and service provider/vendor risks, identify emerging risk trends and monitor risk appetite metrics
Seniority
Manager, hands-on IC
