Technology Risk Manager

Help shape technology risk, governance and resilience

We're partnering with a leading Australian organisation to find an experienced Technology Risk Manager to join its Technology Governance & Risk team.

This is a high-impact opportunity for a technology risk qualified who enjoys operating across technology, cyber, governance, risk, resilience and transformation and wants to play a meaningful role in strengthening technology risk maturity across a complex enterprise environment.

You’ll work closely with senior technology stakeholders, Information Security, Architecture, Platform Operations, Data, Delivery, Risk, Audit and external partners to identify and manage technology risks, strengthen controls and ensure remediation outcomes are delivered and evidenced.

About the role

Reporting into the Head of Technology Governance & Risk / Technology Risk Lead, you'll be responsible for leading and supporting technology risk management, control assurance, governance and remediation activities across the technology environment.

This is a role that combines risk management with practical technology delivery. You’ll provide constructive challenge to risk and control owners, help teams understand their obligations, ensure remediation is meaningful and sustainable, and provide clear insight into the organisation’s technology risk profile.

Your responsibilities will include:

- Leading and supporting the identification, assessment, monitoring and reporting of technology, cyber, cloud, supplier, data and operational resilience risks.

- Supporting technology and risk governance forums with clear risk insights, control gaps,



remediation updates, exceptions and risk acceptances.

- Maintaining technology risk registers, issue registers, remediation plans, control evidence and risk dashboards.

- Supporting control design, control assessments, evidence collection, assurance activities and issue closure verification.

- Managing technology risk issues, audit findings and remediation actions through to effective and evidenced closure.

- Providing practical risk advice and constructive challenge across technology projects, transformation, cloud services, applications, infrastructure, data and suppliers.

- Supporting operational resilience and regulatory requirements, including APRA CPS 230 and CPS 234.

- Contributing to executive and committee reporting covering technology risk exposure, control maturity, remediation progress, material risks and emerging themes.

- Supporting third-party technology risk and supplier assurance activities.

- Identifying opportunities to improve technology risk processes, governance, reporting, control maturity and issue management.

What we’re looking for

We're looking for an experienced Technology Risk professional who can operate confidently between technical teams, risk functions and senior stakeholders.

You’ll ideally bring:





- 7+ years' experience across technology risk, cyber risk, information security risk, technology governance, IT audit, control assurance, operational resilience or a related discipline.

- Strong experience identifying, assessing and managing technology and cyber risks across complex enterprise environments.

- Experience with risk governance, control assurance, remediation, audit actions, risk acceptance and issue management.

- Strong understanding of technology control environments and evidence-based assurance.

- Experience producing risk reporting, dashboards, KRIs, KCIs, committee papers and executive management information.

- Experience providing risk advice and constructive challenge across technology change and delivery.

- Strong stakeholder management skills, with the ability to communicate complex technology risks to both technical and executive audiences.

- Excellent analytical skills and the ability to assess control gaps, remediation plans, evidence quality and residual risk.

- The confidence to challenge constructively and influence outcomes without relying on direct authority.

- A pragmatic approach to balancing risk, regulatory expectations, business outcomes and delivery timelines.

Frameworks & regulatory experience

Experience with one or more of the following will be highly regarded:

- APRA CPS 230

- APRA CPS 234

- ISO 27001

- NIST CSF

- COBIT

- ITIL

- CIS Controls

- IT General Controls

- Technology control assurance

- Operational resilience

- Business continuity and disaster recovery

📌 Technology Risk Manager (Sydney)
🏢 Talenza
📍 Sydney