Role Overview

The Technology Risk, Business Management & Strategy function supports the ASX Technology division across technology risk, governance, planning and operating‑rhythm activities. The function enables technology leaders to manage risk, meet regulatory and assurance expectations, and maintain effective governance and performance disciplines.

Your Responsibilities

- Support the delivery of technology risk uplift initiatives, including the rollout of the IT General Controls library across the organisation.
- Support governance, planning and execution tracking, including monitoring progress, dependencies, risks and key milestones across technology risk uplift initiatives.
- Partner with technology stakeholders across key domains (e.g. Cyber Security, IT Service Management, Engineering) to support and advise on the design and uplift of controls, ensuring they are practical, implementable and aligned to requirements, driving improved control effectiveness.
- Translate key concepts, plans and requirements into practical templates, guidance, education materials and artefacts, supporting consistent implementation and understanding across the division.
- Support the uplift and ongoing maintenance of the technology policy framework, including working with policy owners to ensure control requirements and obligations are appropriately embedded within policies, standards and supporting artefacts, and aligned to the ASX Risk Taxonomy.
- Support broader initiatives such as uplift to the IT Service Criticality methodology, contributing to design, artefact development, implementation approach and rollout support where required.

Your Experience and Qualifications

Must have

- Demonstrated experience supporting technology risk, controls or transformation initiatives.




- Experience with control uplift or implementation activities, with an understanding of how controls are designed and embedded in practice, particularly for technology and cyber domains (e.g. Identity & Access, Cloud, DevOps, Data Centre).
- Solid understanding of how controls operate within technology environments, including the ability to work directly with technical stakeholders and translate requirements into practical implementation approaches.
- Ability to operate within complex, evolving delivery environments, supporting governance, planning and execution tracking and delivery across multiple stakeholders and initiatives.
- Ability to translate requirements and approaches into practical outputs, including templates, guides, and implementation approaches.
- Strong stakeholder engagement and communication skills, with the ability to work collaboratively across technology teams to support adoption and uplift of controls.

Nice to have

- Experience with risk transformation initiatives (e.g. design frameworks and approaches, support implementation and embedment, uplift risk maturity, etc.)
- Experience using work tracking tools (e.g. JIRA) to manage, track and report on initiatives and work progression.
- Exposure to technology policies and standards, including drafting frameworks and/or supporting their operationalisation.
- Experience working within regulated environments.
- Relevant risk or technology certification (CISA, CISSP, AWS) or equivalent professional experience.
- Familiarity with recognised technology and risk frameworks such as NIST, ITIL, COBIT or COSO.

To be considered for this position, candidates must be legally authorised to work in Australia on a permanent basis without any restrictions.

#J-18808-Ljbffr

📌 Senior Analyst - Technology Risk & Control Enablement (Line 1 - max term 2 years) (City of Sydney)
🏢 ASX
📍 City of Sydney