Manager - Technology, Cyber and Data Risk

Your Opportunity

We have an exciting opportunity for an experienced Technology, Cyber & Data Risk Manager to join our Group Risk & Compliance team.

In this role, you'll provide independent Line 2 oversight, review and challenge across technology, cyber security and data risk. You'll work closely with stakeholders across the business as a trusted risk advisor, providing advice that helps Cuscal achieve its objectives while operating within its risk appetite.

You'll make an impact by:

• Providing independent Line 2 oversight across technology, cyber and data risks
• Partnering with stakeholders to identify, assess and manage risk while providing constructive challenge
• Reviewing and challenging risk decisions, risk acceptances, control effectiveness and risk treatment plans
• Reviewing incidents, breaches and near misses to identify root causes and recommend appropriate remediation
• Performing targeted assurance reviews across technology, cyber and data controls
• Providing independent risk oversight across significant change initiatives including technology transformation, cloud migration, AI initiatives and other digital projects
• Identifying and escalating material risks, control deficiencies and emerging risk themes
• Supporting risk reporting to senior management and executives
• Developing and maintaining risk policies, standards and training materials

What You'll Bring

You're an experienced risk professional who can combine strong technical knowledge with a practical, outcomes-focused approach. You'll be comfortable working independently, constructively challenging stakeholders and translating complex risk concepts into clear, actionable insights for both technical and non-technical audiences.

To be successful in this role, you'll bring:

• Solid experience in technology, cyber or operational risk within financial services or payments
• Strong knowledge of financial services regulatory and compliance requirements, including APRA CPS 230 and CPS 234, CPG 235 and PCI-DSS
• Familiarity with risk and technology frameworks including AS/NZS ISO 31000, ISO 27001, NIST CSF, COBIT, COSO and ITIL
• Familiarity with AI standards and regulatory developments including the Australian AI principles and EU AI Act
• Strong critical thinking, analytical and problem-solving skills
• The ability to influence senior stakeholders and build strong working relationships
• Excellent written and verbal communication skills, with the ability to simplify complex risk concepts for different audiences
• A high degree of initiative, sound judgement and the ability to work autonomously