Head of Technology Risk
Employment Info
JOB SUMMARY
Requirements
- Minimum of 10 years of experience in a combination of technology risk, operational risk, IT audit, or technology governance, with at least three years in a Senior Manager or above role leading technology risk management functions within a highly regulated sector such as financial services, insurance, or banking.
- Deep knowledge and practical experience of APRA prudential standards applicable to technology and operational risk, specifically CPS 230 (Operational Risk Management), CPS 234 (Information Security), and CPS 220 (Risk Management), and their application within a life insurance or financial services context.
- Strong understanding of technology risk domains including infrastructure risk, cloud risk, application risk, data risk, cyber risk, AI risk, and technology change risk — and the ability to assess and govern each within a structured risk management framework.
- Demonstrated experience designing and operating technology risk frameworks, including risk appetite and tolerance frameworks, key risk indicator (KRI) programs, control self-assessment processes, and technology risk registers within a regulated financial services environment.
- Strong knowledge of industry risk frameworks and standards including NIST CSF, ISO 31000, COBIT, and ITIL, with the ability to apply these pragmatically in a technology organisation undergoing digital transformation and cloud adoption.
Responsibilities
- Own and continuously enhance TAL’s Technology Risk Management framework, ensuring alignment with Enterprise Risk Management and APRA standards across all risk domains (e.g. cyber, cloud, data, AI, change).
- Lead end-to-end identification, assessment, and monitoring of technology risks, maintaining the Technology Risk Register and escalating material risks to the CIO and relevant committees.
- Provide independent oversight of compliance with key APRA standards (CPS 230, CPS 234, CPS 220), including control effectiveness, remediation tracking, and regulatory engagement support.
- Deliver executive-level technology risk reporting, highlighting risk profile, key trends, control performance, and remediation progress against risk appetite.
- Lead Technology Operational Resilience, including critical operations, tolerance setting, and business continuity/disaster recovery governance and testing.
- Oversee risk assessment for major technology initiatives (e.g. cloud, AI, transformation), ensuring risks are identified early and managed within appetite before execution.
- Drive risk appetite, assurance, and culture across Technology, including KRIs, audit remediation, cross-functional alignment (Risk, Compliance, Legal, CISO), psychosocial risk management, and leadership of the Technology Risk team (including FAR obligations).
Desired Qualifications
- Industry-recognised professional certifications such as CRISC, CISM, CGEIT, or CISSP are highly regarded.
Are you interested in this position?
Apply by clicking on the “Apply Now” button below!
#DesignFintech #GlobalDesigners
#FintechInnovation #CreativeJobs
#DesignHub
#Tech Meets Design
#DesignerNetwork
#Myausjob
Related Jobs
Your Next Career Move Starts Here