Tech Risk Analyst

As the needs of our customers change, so do we.

At AGL, we believe progress is powered by our people.

If you’re set on making real change for tomorrow, we have the scale, resources and ambition to get it started today.

Now’s an extraordinary time to work with us. We’re taking the lead on renewables and expanding our products to make them more sustainable, affordable and useful for all Australians.

That’s what we call progress. To achieve it, we’re bringing together people with unique stories, perspectives, backgrounds and talent - and we need yours too

About the role:
The role of the IT Risk Analyst is to support the functions in the delivery of AGL’s Risk and Compliance Frameworks. The primary responsibility is operation of the technology risk, compliance and controls assurance framework across AGL in alignment to AGL’s Policies, Frameworks and Standards. This will include maintaining the technology risk management tool and assessment of both key and non-key controls nominated to mitigate our technology risks for IT risk profiles. You will also be required to maintain and manage our information security exemptions and provide reports to business and technology stakeholders.

The role will also be responsible for the ongoing input to AGL’s IT risk management tool; to enable our security solutions and risk services network to drive positive risk culture, improve compliance, develop metrics and reporting outputs with a focus on continuous improvement. The role is expected to work both independently and as a team member and will support other strategic Cybersecurity tasks and efforts as needed.

What you'll you be doing:
- Input to AGL’s IT risk management tool by maintaining data quality, reporting, test and validate the effectiveness of key controls against technology risks as identified by the business for their risk profiles.- Ensure Design Effectiveness (DE) and Operating Effectiveness (OE) assessment on IT Controls is executed by reviewing existing documentation, performing interviews and process walkthroughs with persons accountable or with sufficient competence of the control area.- Proactively guide IT controls owners where a key control are poorly designed, to redesign or improved the controls as required.- Report on key IT controls that have a material impact on the likelihood of a risk occurring and/or its consequence, such as resulting in a financial loss.- Analyse risk data for the purposes of identifying trends, quality control and continuous improvement opportunities.- Support the IT Risk Services team in the delivery of risk management reporting to relevant technology and risk committees, and executive management as required.- Manage and maintain the cyber security exemption workflow, related request processes and exemption request status reporting.- Work with business and technology teams to ensure our standards and processes remain fit-for-purpose.- Identify opportunities, seek out solutions and raise awareness with internal business and technology teams on their risk and compliance management activities.- Strong ability to work independently as required, and as part of a team.

What you'll bring to the role:
- Understanding of Risk Management frameworks/practices from working in other large organisations.- Sounds understanding of the three lines of defence model.- Previous experience working with IT risk profiles, measurement, controls assessments/ assurance, and reporting on ongoing assurance activities.- Strong presentation, communication (verbal and written) and negotiation skills.- Strong focus on delivery and ability to drive positive outcomes. Strong ability to communicate with a range of stakeholder groups including senior management, external audit and internal business and technology teams.- An ability to use influencing skills to bring about change within and across AGL’s businesses.- A demonstrated willingness and ability to take ownership and accountability of decisions and advice.- Work collaboratively with our people at all levels across the organisation.- Flexibility and ability to handle a variety of tasks, adjust quickly to priorities and meet changing business needs.- Knowledge of company obligations, risks and the underpinning controls assurance required to support an organisation like AGL.- Experience with controls frameworks such as NIST, AESCSF, COBIT, and IT Best Practices (desirable)- Knowledge of the Australian energy industry, with particular emphasis on key risk drivers within the industry (desirable).- Level of comfort working in an organisation that uses Agile and delivery pipelines approaches to technology management.- Post Graduate degree or other qualification in risk and compliance management (desirable)

Reach out to us if you have any questions:
Please note - unsolicited resumes from agencies will not be accepted by AGL.

LI-Hybrid

COVID-19 Vaccination Policy

Inclusion at AGL

AGL has a commitment to maintain a diverse workforce