Your Opportunity

We have an exciting opportunity for an experienced Technology, Cyber & Data Risk Manager to join our Group Risk & Compliance team.

In this role, you'll provide independent Line 2 oversight, review and challenge across technology, cyber security and data risk. You'll work closely with stakeholders across the business as a trusted risk advisor, providing advice that helps Cuscal achieve its objectives while operating within its risk appetite.

You'll make an impact by:

- Providing independent Line 2 oversight across technology, cyber and data risks
- Partnering with stakeholders to identify, assess and manage risk while providing constructive challenge
- Reviewing and challenging risk decisions, risk acceptances, control effectiveness and risk treatment plans
- Reviewing incidents, breaches and near misses to identify root causes and recommend appropriate remediation
- Performing targeted assurance reviews across technology, cyber and data controls
- Providing independent risk oversight across significant change initiatives including technology transformation, cloud migration, AI initiatives and other digital projects
- Identifying and escalating material risks, control deficiencies and emerging risk themes
- Supporting risk reporting to senior management and executives
- Developing and maintaining risk policies,



standards and training materials

What You'll Bring

You're an experienced risk skilled who can combine strong technical knowledge with a practical, outcomes-focused approach. You'll be comfortable working independently, constructively challenging stakeholders and translating complex risk concepts into clear, actionable insights for both technical and non-technical audiences.

To be successful in this role, you'll bring:

- Solid experience in technology, cyber or operational risk within financial services or payments
- Strong knowledge of financial services regulatory and compliance requirements, including APRA CPS 230 and CPS 234, CPG 235 and PCI-DSS
- Familiarity with risk and technology frameworks including AS/NZS ISO 31000, ISO 27001, NIST CSF, COBIT, COSO and ITIL
- Familiarity with AI standards and regulatory developments including the Australian AI principles and EU AI Act
- Strong critical thinking, analytical and problem-solving skills
- The ability to influence senior stakeholders and build strong working relationships
- Excellent written and verbal communication skills, with the ability to simplify complex risk concepts for different audiences
- A high degree of initiative, sound judgement and the ability to work autonomously

📌 Manager - Technology, Cyber and Data Risk (Sydney)
🏢 Cuscal
📍 Sydney