Technology Risk and Complaince Manager

1 week ago

Melbourne, Victoria, Australia McMillan Shakespeare Full time

The McMillan Shakespeare Group (MMS) is a trusted provider of salary packaging, novated leasing, disability plan management and support co-ordination, asset management and related financial products and services.

From our origins in 1988 when we created Australia's salary packaging industry to today, MMS has a proud history of innovation and exceptional service.


Through our subsidiaries, we offer a breadth of services and expertise designed to responsibly deliver superior long-term value to our clients and customers, which include Federal and State governments and some of the largest public and private sector, health and charitable organisations.


The Manager Technology Risk & Compliance role can be done from Adelaide, Brisbane, Melbourne or Sydney and is a paternity cover for 6 months full time that may extend to one year.

MMS has a number of compliance obligations imposed by the regulatory and contractual environment in which we operate.

The manager technology risk and compliance is to lead the analysis monitoring and strict compliance to internal, audit and contractual policies and controls in relation to the delivery of governance over digital and traditional on-premise services.

A key component of the role is education and awareness ensuring staff and 3rd parties are abreast of the requirements in order to meet this compliance.


The Manager Technology Risk & Compliance is responsible for direct control of security owned controls and compliance obligations in addition to stakeholder management and leading oversight governance of first line of defense teams and their roles in monitoring, analysing, executing security governance controls.

The manager must develop a strong working relationship with IT functional teams and business stakeholders to ensure baseline security requirements are met and assets remain protected within these functional areas and escalated where non-compliance exists.

The Manager Technology Risk & Compliance is also responsible for keeping abreast of legislative, compliance and security industry changes as they relate to MMS business whilst developing, maintaining and reporting risk management frameworks that aim to protect the confidentiality,

availability and integrity of group assets including data.

The Role:

  • Map existing contracts against security standards identifying potential gaps in compliance and for input into the information security policy and standards
  • Manage and lead internal and external audits end to end being the technology authoritative source and focal point whilst ensuring relevant artefacts are sourced and provided in a timely manner
  • Evaluate cybersecurity standards including NIST, ASD Essential 8, ISO27000 and PCI DSS for alignment with internal frameworks
  • Ensure internal security standards, policy, audit and contracted security requirements are communicated across the business and with 3rd Parties
  • Ensure 3rd parties comply with all relevant due diligence obligations and provide regular attestations
  • Manage the cybersecurity education, training and awareness program and educate employees in security best practices
  • Periodically conduct security reviews and workshops to report business effectiveness in meeting documented standards, controls and compliance to contractual or policy objectives
  • Lead, steer and oversee the Information, Communication and Technology Risk management framework
  • Conduct regular risk assessments and workshops to ensure risks to the organisation are assessed and understood, and are fed back to stakeholders to ensure the continued effectiveness of the risk management strategy
  • Manage and improve the risk posture, contribute and evaluate solutions for remediating or mitigating risks and assess residual risks
  • Work with all stakeholders to educate and identify controls and compliance requirements that are applicable
  • Undertake contract and 3rd party security reviews providing guidance, checklists to support business risk decisions
  • Generate security metrics and provide regular reports on security compliance performance to technology management and risk and audit committees
  • Lead and prepare Crisis management testing and response exercises and relevant reporting
  • Respond to information security incidents
  • Lead, maintain and develop incident response processes and procedures when new threats to the organisation arise
  • Be an active participant in incident management to support controlled and coordinated responses
  • Develop security policy, standards and develop processes and procedures for evaluation and exemption where required.
  • When necessary, prepare Post Incident Reviews
  • Any other security risk and compliance initiatives, as requested.

You will bring:

  • 510 years experience in IT Security and Risk Management
  • Experience with legal and regulatory obligations such as the Australian Privacy Principles.
  • Supply chain risk management and assesments including 3rd party security risk assessments
  • Experience

  • Manager Technology Risk

    1 week ago

    Melbourne, Victoria, Australia Link Group Full time

    OverviewReporting to the Head of Strategy, Architecture and Governance, this role is responsible for developing and enhancing Link RSS Technology risk and compliance framework, enabling Link RSS to identify, assess, monitor, and control its IT and related risks. It includes the end to end management of managing the resolution of risk related incidents and...

  • Technology Risk Manager

    1 week ago

    Melbourne, Victoria, Australia Bluefin Resources Full time

    The CompanyYou will join a leading Australian financial services organisation that puts its customers first and prides itself on the diversity of people.A day in the Life of a Technology Risk Manager - CloudThis second-line role is responsible for reviewing how well the organisation is adhering to the risk management framework, policies and procedures...

  • Technology Risk Manager

    1 week ago

    Melbourne, Victoria, Australia Mars Recruitment Full time

    Key Responsibilities: Ensure the appropriate and successful execution of Operational Risk Framework throughout the business Identify key incidents, as well as manage the appropriate escalation and remedial actions Support the wider Cyber, Technology and Data teams with highquality risk advice and collaboration Conduct 'Risk in Change' assessments and product...

  • Manager - Technology & Data Risk

    1 week ago

    Melbourne, Victoria, Australia Cbus Full time

    Manager - Technology & Data RiskAbout CbusCreated by workers, for workers, Cbus Super is one of Australia's most successful Superannuation funds. For almost four decades we've proudly represented those who help shape Australia, hard-working individuals who deserve to make the most of their retirement, no matter the industry. As an award-winning fund we've...

  • Sustainability, Risk

    1 week ago

    Melbourne, Victoria, Australia Compliance and Risk Management Recruitment Full time

    Education & Child Care Secondary Other Melbourne Permanent / Full Time20th March, 2023:Our client is a leading co-educational catholic school located in the South East of Melbourne. With a culture of continuous improvement coupled with respect, collaboration, and generosity they boast a long -term staff tenure on large & impressive grounds designed to...

  • Technology Risk Analyst

    1 week ago

    Melbourne, Victoria, Australia AustralianSuper Full time

    At AustralianSuper, we truly care about our colleagues. We know work and life are intertwined. That's why we support the diverse needs of everyone and have policies that enable us all to thrive and be truly flexible. We ensure diversity is celebrated for the opportunity it provides us all to learn and grow and deliver better outcomes for members.Your new...

  • Information and Technology Risk

    1 week ago

    Melbourne, Victoria, Australia Australian Unity Full time

    Join us and let's make a bigger difference together.It's an exciting time to be joining Australian Unity - we have grown significantly over recent years and are transforming to capitalise on further growth opportunities to help our customers and employees thrive. We operate with commercial principles and with a strong social purpose to create community...

  • Technology Risk Specialist

    1 week ago

    Melbourne, Victoria, Australia IAG New Zealand Full time

    READY FOR ANYTHINGAt IAG, we live and work by our purpose to make your world a safer place. We are motivated by a unique culture that celebrates honesty, creativity, empathy, equity and collaboration. We call it the IAG way, and it means we all share a 'ready for anything' mindset that sets the tone for positive actions and positive outcomes. We put heart...

  • Risk Officer

    1 week ago

    Melbourne, Victoria, Australia Compliance and Risk Management Recruitment Full time

    Banking & Finance Analyst Melbourne Permanent / Full Time17th February, 2023:We are working with a growing boutique financial services business who are currently seeking a Risk Officer for a newly created role in their Melbourne head office.Key Responsibilities: Incident, breach and complaint assessments Testing and maintaining compliance Compliance...

  • Senior Manager Technology Risk Consulting

    1 week ago

    Melbourne, Victoria, Australia Grant Thornton Full time

    Grant Thornton Australia is a leading audit, tax and advisory firm where care is just as important as capability – because we believe that the experience is just as important as the outcome. With our values at the core, we are creating a unique and constructive culture where we care for our people, clients and communities and support them to thrive. ...

  • Manager Technology Risk Sap

    1 week ago

    Melbourne, Victoria, Australia KPMG Full time

    Our Technology Risk team advises clients about their potential IT risks and opportunities. We work as an integrated business and as part of a larger multi-disciplinary team. The team draws on a diverse and dedicated group of people, powerful KPMG methodologies, innovating capability and assets, and global resources to support our clients in achieving the...

  • Risk & Compliance Officer

    1 week ago

    Melbourne, Victoria, Australia Compliance and Risk Management Recruitment Full time

    Banking & Finance Other Melbourne Permanent / Full Time10th May, 2023:We are working with a growing boutique financial services business who are currently seeking a Risk & Compliance Officer for a newly created role.Key Responsibilities: Incident, breach and complaint assessments Testing and maintaining compliance Compliance checklists Review documents,...

  • Senior Manager Technology Risk Consulting

    1 week ago

    Melbourne, Victoria, Australia Efinancialcareers Ltd. Full time

    Senior Manager Technology Risk ConsultingGrant ThorntonMelbourne, AustraliaSenior Manager Technology Risk ConsultingGrant ThorntonMelbourne, AustraliaPosted 12 days agoPermanentCompetitiveSenior Manager Technology Risk ConsultingJob no:493727Work type:Full timeLocation:MelbourneCategories:Consulting, Hybrid workingGrant Thornton Australia is a leading audit,...

  • Senior Manager Technology Risk Consulting

    1 week ago

    Melbourne, Victoria, Australia Efinancialcareers Ltd. Full time

    Senior Manager Technology Risk Consulting Grant Thornton Melbourne, Australia Senior Manager Technology Risk Consulting Grant Thornton Melbourne, Australia Posted 2 days ago Permanent Competitive Senior Manager Technology Risk Consulting Job no: Work type: Full time Location: Melbourne Categories: Consulting, Hybrid working Grant Thornton Australia is a...

  • Senior Technology Risk Consultant

    1 week ago

    Melbourne, Victoria, Australia Amstelveen Pty Full time

    1 week ago Be among the first 25 applicants Direct message the job poster from Amstelveen Managing Director at Amstelveen Victoria Are you apassionate risk professionalseeking a dynamic role that combinescomplex problem-solving,strategic thinking, andhigh-impact decision-making?Amstelveen, a rapidly growing risk consulting firm, is expanding its Melbourne...

  • Senior Technology Risk Consultant

    1 week ago

    Melbourne, Victoria, Australia Amstelveen Pty Full time

    1 week agoBe among the first 25 applicantsDirect message the job poster from AmstelveenManaging Director at Amstelveen VictoriaAre youapassionate risk professional seeking a dynamic role that combinescomplex problem-solving,strategic thinking, andhigh-impact decision-making?Amstelveen, a rapidly growing risk consulting firm, is expanding its Melbourne team...

  • Senior Manager, 1st Line Technology Risk

    1 month ago

    Melbourne, Victoria, Australia Randstad Australia Full time

    We are in search of a Senior Manager for our client's 1st Line Technology Risk & Compliance team. This role is crucial and plays a vital part in the structure of the organization.Benefits & CompensationThe position offers a competitive package of up to $212,000 annually, with the potential for a 20% discretionary bonus.This opening is tailored for a seasoned...

  • Senior Manager, 1st Line Technology Risk

    1 week ago

    Melbourne, Victoria, Australia Randstad Australia Full time

    We are in search of a Senior Manager for our client's 1st Line Technology Risk & Compliance team. This role is crucial and plays a vital part in the structure of the organization.Benefits & CompensationThe position offers a competitive package of up to $212,000 annually, with the potential for a 20% discretionary bonus.This opening is tailored for a seasoned...

  • Senior Manager, 1st Line Technology Risk

    3 weeks ago

    Melbourne, Victoria, Australia Randstad Australia Full time

    We are in search of a Senior Manager for our client's 1st Line Technology Risk & Compliance team. This role is crucial and plays a vital part in the structure of the organization.Benefits & CompensationThe position offers a competitive package of up to $212,000 annually, with the potential for a 20% discretionary bonus.This opening is tailored for a seasoned...

  • Senior Technology Risk Consultant

    1 week ago

    Melbourne, Victoria, Australia Amstelveen Pty Full time

    1 week ago Be among the first 25 applicants Direct message the job poster from AmstelveenManaging Director at Amstelveen VictoriaAre you apassionate risk professionalseeking a dynamic role that combinescomplex problem-solving,strategic thinking, andhigh-impact decision-making?Amstelveen, a rapidly growing risk consulting firm, is expanding its Melbourne...