Senior Manager Technology Risk & Controls Enablement

Your responsibilities

• Own and lead the Line 1 technology risk and controls enablement capability, determining how enterprise risk & compliance frameworks are translated into practical, scalable and ASX Technology divisional, as well as technology and cyber risk specific approaches.
• Design, evolve and govern the technology and cyber risk ecosystem of taxonomies, metrics, control frameworks, policies and assessment approaches, ensuring they are and remain coherent, usable, aligned to internal and external expectations, and informed by best practice.
• Develop new risk and control approaches where gaps exist, including defining trade-state practices, implementation plans, guidance and transition pathways, in alignment to enterprise risks and compliance, to uplift maturity.
• Own the ITGC library, including maintaining artefacts, facilitating changes, coordinating control rollout and assurance activities.
• Evolve integrated IT system-level risk reporting towards data driven outputs considering risk maturity.
• Provide authoritative Line 1 input into enterprise frameworks, such as risk & compliance as well as criticality tiering methodologies, ensuring divisional as well as technology and cyber risk considerations are accurately reflected and grounded in operational reality.
• Lead the development of guidance, playbooks and education for the division and for technology and cyber risk across the enterprise, lifting understanding and capability so risk and controls are embedded into day-to-day technology delivery and operations.
• Drive continual uplift of the technology risk ecosystem through simplification, standardisation, automation and clear ownership.
• Lead, coach and support a team of risk practitioners in an environment with competing priorities and elevated risk exposure, building autonomy, reducing single-point dependencies, and progressively uplifting risk maturity through practical simplification and standardisation.

Must have

• Significant experience in technology risk and/or compliance roles (Line 1, Line 2 or Line 3), with the credibility and judgement to operate autonomously in a senior Line 1 leadership capacity.
• Demonstrated ability to translate enterprise risk standards and frameworks into fit-for-purpose technology practices, and to operationalise and embed them consistently across complex environments.
• Strong technology and cyber risk expertise, with sufficient technical depth to engage credibly with SMEs such as engineers and cyber practitioners, and to design practical risk and control approaches grounded in operational reality.
• Proven capability to develop, own and evolve risk and control artefacts (e.g. taxonomies, libraries, assessment approaches), maintaining coherence, usability and scalability as the environment changes.
• Demonstrated ability to exercise sound risk judgement at system level, including determining what good looks like at scale, making trade-offs, incorporating feedback and adapting approaches to enable consistency and usability.
• Strong leadership capability in ambiguous and evolving environments, including structuring work, setting direction, prioritising effort and driving outcomes without reliance on established templates or structures.
• People leadership capability, demonstrated through direct, indirect or matrix leadership, including coaching and developing experienced practitioners and building confidence, judgment and autonomy in others.

Nice to have