Technology Risk Manager
Help shape technology risk, governance and resilience.
We're partnering with a leading Australian organisation to find an experienced
Technology Risk Manager
to join its Technology Governance & Risk team.
This is a high‐impact opportunity for a technology risk professional who enjoys operating across
technology, cyber, governance, risk, resilience and transformation
and wants to play a meaningful role in strengthening technology risk maturity across a complex enterprise environment.
You'll work closely with senior technology stakeholders, Information Security, Architecture, Platform Operations, Data, Delivery, Risk, Audit and external partners to identify and manage technology risks, strengthen controls and ensure remediation outcomes are delivered and evidenced.
About the role
Reporting into the
Head of Technology Governance & Risk / Technology Risk Lead
, you'll be responsible for leading and supporting technology risk management, control assurance, governance and remediation activities across the technology environment.
This is a role that combines
risk management with practical technology delivery
. You'll provide constructive challenge to risk and control owners, help teams understand their obligations, ensure remediation is meaningful and sustainable, and provide clear insight into the organisation's technology risk profile.
Your responsibilities will include:
Leading and supporting the identification, assessment, monitoring and reporting of
technology, cyber, cloud, supplier, data and operational resilience risks
.
Supporting technology and risk governance forums with clear risk insights, control gaps, remediation updates, exceptions and risk acceptances.
Maintaining
technology risk registers, issue registers, remediation plans, control evidence and risk dashboards
.
Supporting control design, control assessments, evidence collection, assurance activities and issue closure verification.
Managing technology risk issues, audit findings and remediation actions through to effective and evidenced closure.
Providing practical risk advice and constructive challenge across
technology projects,



transformation, cloud services, applications, infrastructure, data and suppliers
.
Supporting operational resilience and regulatory requirements, including
APRA CPS 230 and CPS 234
.
Contributing to executive and committee reporting covering technology risk exposure, control maturity, remediation progress, material risks and emerging themes.
Supporting third‐party technology risk and supplier assurance activities.
Identifying opportunities to improve technology risk processes, governance, reporting, control maturity and issue management.
What we're looking for
We're looking for an experienced
Technology Risk professional
who can operate confidently between technical teams, risk functions and senior stakeholders.
You'll ideally bring:
7+ years' experience
across technology risk, cyber risk, information security risk, technology governance, IT audit, control assurance, operational resilience or a related discipline.
Strong experience identifying, assessing and managing technology and cyber risks across complex enterprise environments.
Experience with
risk governance, control assurance, remediation, audit actions, risk acceptance and issue management
.
Strong understanding of technology control environments and evidence-based assurance.
Experience producing
risk reporting, dashboards, KRIs, KCIs, committee papers and executive management information
.
Experience providing risk advice and constructive challenge across technology change and delivery.
Robust stakeholder management skills, with the ability to communicate complex technology risks to both technical and executive audiences.
Excellent analytical skills and the ability to assess control gaps, remediation plans, evidence quality and residual risk.




The confidence to challenge constructively and influence outcomes without relying on direct authority.
A pragmatic approach to balancing
risk, regulatory expectations, business outcomes and delivery timelines
.
Frameworks & regulatory experience
Experience with one or more of the following will be highly regarded:
APRA CPS 230
APRA CPS 234
ISO *****
NIST CSF
COBIT
ITIL
CIS Controls
IT General Controls
Technology control assurance
Operational resilience
Business continuity and disaster recovery
Third‐party / supplier technology risk
Cloud risk and cyber resilience
Desirable experience
Experience within
insurance, financial services or another highly regulated environment
would be advantageous.
You may also have exposure to:
Technology risk within an APRA-regulated organisation.
Cyber security governance and control remediation.
Operational resilience uplift.
Internal or external audit and regulatory reviews.
Third‐party / SaaS technology risk.
Cloud risk, particularly Microsoft Azure and Microsoft 365 environments.
Identity and access management, privileged access and change controls.
Vulnerability management, backup/recovery and logging/monitoring controls.
GRC platforms and technology risk management tools.
Risk acceptance and evidence-based issue closure.
Relevant certifications such as
CRISC, CISA, CISM, CISSP, ISO *****, ITIL or COBIT
are desirable but not essential.
Why join?
This is an opportunity to join a technology function that is actively investing in
risk maturity, operational resilience, cyber security and technology transformation
.
You'll have broad exposure across Technology, Security, Architecture, Data, Risk, Audit and business stakeholders, while working on initiatives that have genuine organisational impact.
If you're someone who can
understand the technology, challenge the risk, influence stakeholders and make sure remediation actually happens
, this role offers an excellent opportunity to step into a highly visible technology risk position.
#J-*****-Ljbffr

📌 Technology Risk Manager (New South Wales)
🏢 Talenza
📍 New South Wales