Technology Risk Manager

Help shape technology risk, governance and resilience

We're partnering with a leading Australian organisation to find an experienced

Technology Risk Manager

to join its Technology Governance & Risk team.

This is a high-impact chance for a technology risk professional who enjoys operating across

technology, cyber, governance, risk, resilience and transformation

and wants to play a meaningful role in strengthening technology risk maturity across a complex enterprise environment.

You’ll work closely with senior technology stakeholders, Information Security, Architecture, Platform Operations, Data, Delivery, Risk, Audit and external partners to identify and manage technology risks, strengthen controls and ensure remediation outcomes are delivered and evidenced.

About the role Reporting into the

Head of Technology Governance & Risk / Technology Risk Lead , you'll be responsible for leading and supporting technology risk management, control assurance, governance and remediation activities across the technology environment.

This is a role that combines

risk management with practical technology delivery . You’ll provide constructive challenge to risk and control owners, help teams understand their obligations, ensure remediation is meaningful and sustainable, and provide clear insight into the organisation’s technology risk profile.

Your responsibilities will include:

Leading and supporting the identification, assessment, monitoring and reporting of

technology, cyber, cloud, supplier, data and operational resilience risks .

Supporting technology and risk governance forums with clear risk insights,



control gaps, remediation updates, exceptions and risk acceptances.

Maintaining

technology risk registers, issue registers, remediation plans, control evidence and risk dashboards .

Supporting control design, control assessments, evidence collection, assurance activities and issue closure verification.

Managing technology risk issues, audit findings and remediation actions through to effective and evidenced closure.

Providing practical risk advice and constructive challenge across

technology projects, transformation, cloud services, applications, infrastructure, data and suppliers .

Supporting operational resilience and regulatory requirements, including

APRA CPS 230 and CPS 234 .

Contributing to executive and committee reporting covering technology risk exposure, control maturity, remediation progress, material risks and emerging themes.

Supporting third-party technology risk and supplier assurance activities.

Identifying opportunities to improve technology risk processes, governance, reporting, control maturity and issue management.

What we’re looking for We're looking for an experienced

Technology Risk professional

who can operate confidently between technical teams, risk functions and senior stakeholders.





You’ll ideally bring:

7+ years' experience

across technology risk, cyber risk, information security risk, technology governance, IT audit, control assurance, operational resilience or a related discipline.

Strong experience identifying, assessing and managing technology and cyber risks across complex enterprise environments.

Experience with

risk governance, control assurance, remediation, audit actions, risk acceptance and issue management .

Strong understanding of technology control environments and evidence-based assurance.

Experience producing

risk reporting, dashboards, KRIs, KCIs, committee papers and executive management information .

Experience providing risk advice and constructive challenge across technology change and delivery.

Strong stakeholder management skills, with the ability to communicate complex technology risks to both technical and executive audiences.

Excellent analytical skills and the ability to assess control gaps, remediation plans, evidence quality and residual risk.

The confidence to challenge constructively and influence outcomes without relying on direct authority.

A pragmatic approach to balancing

risk, regulatory expectations, business outcomes and delivery timelines .

Frameworks & regulatory experience Experience with one or more of the following will be highly regarded:

APRA CPS 230

APRA CPS 234

ISO 27001

NIST CSF

COBIT

ITIL

CIS Controls

IT General Controls

Technology control assurance

Operational resilience

Business continuity and disaster recovery

📌 Technology Risk Manager (Sydney)
🏢 Talenza
📍 Sydney