Senior Manager Technology Risk (613732)
Role Summary
You are a seasoned technology risk professional who can work seamlessly with stakeholders in local as well as other time zones. You can self-manage work to meet deadlines and provide a proactive and efficient service to our team, members, and stakeholders.
In this role you will provide your expertise in information security risk management and control to maintain BAU measures put in place to comply with APRA’s guidelines and standards.
On offer is an opportunity to join a genuine culture focused organisation that values their employees, teamwork, and innovation. You will have opportunities to work for one of the best names in banking industry worldwide.
Skillset Required
Bachelor's or Master's degree in Computer Science, Technology, Cybersecurity or related field.
Experience in managing technology risks or as a consultant for the same subject matter is preferred.
Strong familiarity and/or working experience with industry standards, frameworks (e.g., ISO 27001), and regulatory requirements, especially CPS 234.
Be able to provide oversight and challenge technology related risk taking activities.
Ability to work independently with excellent planning, organisation, and problem-solving skills.
Experience in information security management, vendor risk assessment, and control.
Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or similar is desirable.
Experience in Controls self-assessment testing within a complex organisational environment.
Excellent communication and interpersonal skills for working collaboratively with a diverse range of stakeholders.
Exceptional stakeholder management skills and ability to work with geographically dispersed stakeholders.
Key Accountabilities
Manage remediation project(s) to ensure that all the milestones are met on a timely basis.
Engage with various internal stakeholders, local and group, to establish and institutionalise the governance framework around APRA prudential standard(s). This includes Group IT colleagues, local AU management and Group management.
Support the COO/ T&O head in Branch’s readiness for prudential standard(s) tripartite audit with APRA.
Manage & execute the communication and engagement plans with various internal and external stakeholders, including Group IT colleagues, local AU management, external consultants, and auditors. Includes preparation of necessary presentation materials for project updates.
Review documents (e.g. Controls testing programme; internal & external audit reports and any other self-assessment reports) for the purposes of establishing if the controls in place are designed and operating effectively. Provide recommendations for improvements where necessary.
Develop and maintain the necessary documentations to meet the requirements of APRA prudential standard(s).
Be the key liaison partner with external subject matter expert consultants, if any.