Manager, Technology, Cyber and Data Risk

Your Responsibilities

• Partner with stakeholders to identify, assess, manage and report technology, cyber and data risks across business-as-usual operations, change initiatives and transformation programs.
• Support and review risk assessments, control assessments, control design, risk acceptances and treatment plans, focusing on risk ownership, evidence and effectiveness.
• Lead and support control assurance and testing activities, including assessment of IT General Controls (ITGCs) and key technology, cyber and data controls, evaluating control design, operating effectiveness and remediation outcomes.
• Monitor risk appetite measures, key risk indicators, control performance, incidents and emerging risks, escalating material concerns where appropriate.
• Provide risk input to technology change, cloud, cyber security, data, supplier, resilience and AI initiatives, supporting effective risk-based decision making.
• Support issue management and remediation activities, including validation of actions, evidence and closure outcomes.
• Coordinate and support responses to assurance reviews, internal audit, external reviews and regulatory requests, and assist with remediation of findings.
• Conduct targeted and thematic reviews to identify control weaknesses, emerging risks and opportunities for improvement.
• Support the ongoing development and practical application of risk frameworks, policies, standards and controls.
• Build risk capability across stakeholders through coaching, advice and collaboration.
• Your Capability and Experience
• Strong experience in technology, cyber or operational risk, controls assurance, internal audit or risk consulting within a regulated environment.
• Experience assessing control design, effectiveness, remediation activities and IT General Controls (ITGCs).
• Strong understanding of risk frameworks, governance, issue management, incidents, assurance and risk assessments.
• Ability to translate complex technical and risk issues into clear business outcomes and actions.
• Experience applying Risk in Change (RiC) principles and partnering with stakeholders on project risk impacts.
• Strong stakeholder management, communication and influencing skills.
• Manager-level experience, or significant Senior Consultant experience leading reviews, assurance activities and stakeholder engagement.
• Desirable
• Experience in superannuation, wealth management, banking, insurance or financial services.
• Knowledge of APRA requirements and frameworks such as NIST, ISO 27001, COBIT, CISA or ITIL.
• Exposure to cloud, cyber security, third-party risk, resilience, data governance, AI or major technology transformations.
• Relevant qualification or certification in risk, technology, cyber security or audit.
• What to Expect
• At CFS, you'll be working among the very best in the wealth management industry. It's an inspiring environment that encourages development and celebrates success.
• CFS Culture
• At CFS we are committed to creating a thriving environment where individuals can flourish. We believe that success is built upon strong teams, and we are dedicated to celebrating uniqueness, championing individuality and supporting a diverse and inclusive workforce. We believe that when you can truly be yourself, you can unlock your full potential.
• Apply today and join us in helping Australians to achieve their financial freedom.
• Please note, CFS requires all candidates to have full work rights in Australia.
• Where we have preferred candidates, background checks (including Police, Employment, Bankruptcy checks, ASIC banned and disqualified persons) will be completed prior to the final preferred candidate’s employment being confirmed. The outcomes of the background checks do not preclude the preferred candidate, however, they will be assessed against the inherent requirements of the role.
• This role is based on Gadigal Land (Sydney).