Technology Risk and Resilience Specialist

We’re all about helping our members make the most of their money. And while they go after their goals, you can too. As a Technology Risk and Resilience Specialist, you'll play a key role in providing senior second-line risk oversight across technology-enabled change, with a strong focus on data governance, data platforms, artificial intelligence, crisis management and resilience. You'll act as a trusted adviser to Technology, Data and Information leaders, delivering independent challenge, strategic engagement, governance and assurance across complex initiatives.

Working within Risk and Compliance, you'll help ensure technology and resilience risks are effectively identified, assessed and managed within risk appetite. You'll contribute to assurance programs, oversee control effectiveness, provide valuable risk insights and support the ongoing evolution of ART's technology risk profile.
 

This role is a permanent opportunity based in Brisbane, Sydney, or Melbourne.

Day to day, you'll:
 

• Provide independent oversight and challenge of technology risk management and resilience activities.
• Review and assess technology and resilience risks, ensuring they are identified, articulated and managed within risk appetite.
• Deliver expert advice, reporting and risk insights to a range of internal and external stakeholders, including senior leaders.
• Design, coordinate and execute independent control testing and assurance activities across technology and recovery domains.
• Support the development and monitoring of the technology risk profile, including emerging threats, vulnerabilities and resilience considerations.
• Partner with stakeholders to strengthen governance, control effectiveness and sustainable risk remediation outcomes.
• Provide guidance and training to team members on technology risk, resilience and incident response practices.

It goes without saying you'll be a great communicator with top notch interpersonal skills. We'll also expect you to pick up problems and come up with quick, creative ways to solve them. It's quite likely you tick some of the following boxes too:
 

• You have relevant tertiary qualifications in risk, business, commerce, computer science or a related discipline.
• Your experience includes technology risk or information security risk, ideally within financial services.
• You'll bring experience in risk management, assurance, control testing or related governance activities.
• You're experienced in data governance, AI risk and cloud-based environments.
• You can provide independent challenge while confidently influencing senior stakeholders and executives.
• Your analytical, reporting and communication skills are highly developed.
• You'll have a track record of supporting change, transformation or uplift initiatives.
• You're ideally certified in areas such as CISA, CGEIT, CRISC, CCSP, CCSK or cloud technologies including Azure, Google Cloud or AWS.
• You have experience working within APRA-regulated or similarly regulated environments.