21 Oct
|
PwC Australia
|
Adelaide
21 Oct
PwC Australia
Adelaide
Trusted risk advice is built through sound judgement, practical insight and constructive challenge. As the Risk Business Partner for Technology and Cyber at PwC, you’ll be the dedicated Line 2 risk adviser to the firm’s Technology and Cyber team, helping leaders understand, own and actively manage technology, cyber, data and emerging technology risks. You’ll combine enterprise risk business partnering expertise with a practical understanding of technology controls, translating enterprise priorities into consistent execution and decision‑ready insights.
Why PwC?
At PwC Australia, your skills meet purpose. We tackle big challenges across industries like finance, technology, energy, and health, giving you the chance to make a real impact. Here, your growth is our priority. You’ll work with leading teams, explore new technologies, and unlock your full potential.
Join a global community of more than 370,000 people who value bold ideas, collaboration, and lasting change. Together, we’re building trust and shaping the future.
What you’ll do:
- Partner with Technology and Cyber leaders as their trusted Line 2 risk adviser, providing practical support, independent oversight and constructive challenge on risk profiles, control environments and risk management practices.
- Support the first line to identify, assess, monitor and manage technology, cyber, data and AI‑related risks, while maintaining clear accountability for first‑line ownership.
- Undertake hands‑on risk work, including risk assessments, control reviews, deep dives, root‑cause analysis and reviews of issues, incidents, assurance outcomes, risk appetite metrics and guardrails.
- Assess the design and operating effectiveness of key technology, cyber and data controls,
identify gaps and provide pragmatic recommendations that strengthen the control environment.
- Review risk and control implications for current or materially changed technology, products, services and third‑party arrangements, including due diligence and risk acceptance considerations.
- Provide Line 2 oversight of technology and cyber policies, frameworks, standards and procedures, and support their consistent application across the Technology and Cyber team.
- Partner with relevant specialists on data security, AI and GenAI, business continuity, incident and cyber crisis readiness, regulatory compliance and third‑party risk.
- Support incident and post‑incident reviews by assessing control breakdowns, root causes, lessons learned and the adequacy of remediation plans.
- Translate Enterprise Risk priorities into practical delivery, coordinating agreed activities, tracking progress and integrating risk insights into a coherent view for the Technology and Cyber portfolio.
- Prepare clear, consistent and decision‑focused insights for senior stakeholders and governance forums, including reporting on control effectiveness, issues, remediation, assurance and risk appetite.
What we’re looking for:
Core Skills
- Strong experience in Line 2 risk, technology risk, cyber risk, internal audit, business partnering,
enterprise risk transformation or risk programme delivery in a complex, multi‑stakeholder environment.
- A practical understanding of technology controls and how they mitigate risks across areas such as identity and access management, change management, IT operations, vulnerability management, security monitoring, data protection, resilience and third‑party technology services.
- A deep understanding of risk management frameworks and practices, including risk assessment, controls, issues, incidents, assurance and risk appetite, together with experience operating within the Three Lines of Accountability.
- The ability to assess control design and operating effectiveness, identify risk themes and translate technical findings into proportionate, actionable recommendations.
- Proven ability to influence and constructively challenge senior stakeholders, strengthening risk ownership and accountability without relying on formal authority.
- Strong written and verbal communication skills, with the ability to explain complex technology and cyber risk concepts clearly to technical and non‑technical audiences.
- The ability to synthesise risk, controls and assurance information into concise, decision‑ready insights and executive‑level reporting.
Desirable Skills
- Experience partnering directly with a Technology, Cyber, Data or digital function and working collaboratively with technical subject matter experts.
- Knowledge of recognised technology and cybersecurity frameworks and standards, such as NIST Cybersecurity Framework, COBIT and ISO/IEC 27001.
- Experience with data security, AI or GenAI risk, cyber incident or crisis management, third‑party risk and technology‑related r
📌 Technology and Cyber Risk Business Partner | Senior Manager | Risk (Adelaide)
🏢 PwC Australia
📍 Adelaide