Head of Group IT Risk

2 weeks ago


Sydney, New South Wales, Australia Metcash Full time $150,000 - $250,000 per year

At Metcash, you're part of something bigger. We've got the heart of a small business with the strength and support of a big business. When you join Metcash, your work makes a real difference to independent businesses and local communities, empowering you to:

  • Grow your career with tailored development programs
  • Make your mark in a high-performing, values-led team
  • Thrive your way with flexible work options

About the Opportunity

We're seeking a Head of IT Risk to lead and strengthen our approach to IT, cyber security, and resilience risk across the Metcash Group. This pivotal role goes beyond compliance — it's about building trust, enabling innovation, and ensuring our business continues to operate securely and effectively in an ever-evolving digital landscape.

You'll be the guardian of our IT governance, risk, and compliance (GRC) framework, partnering with leaders across all lines of business to identify, assess, and mitigate risks. From embedding risk metrics into executive dashboards to steering third-party risk strategies and leading audit coordination, you'll have a direct impact on protecting our people, our customers, and the communities we serve.

This is a senior leadership role with visibility at the highest levels of the organisation. You'll work hand-in-hand with the Group CIO, CISO, senior executives, and the board, providing insights that shape strategic, risk-based decisions.

In this Role, You Will:

  • Lead the design and execution of IT, cyber security, and resilience risk management, aligned with the Group's overall risk appetite.
  • Establish frameworks, policies, and controls that strengthen compliance with industry standards and regulatory requirements.
  • Develop and report key risk indicators (KRIs) and metrics, ensuring executives have the clarity they need to make informed decisions.
  • Partner with business units, platform teams, and Group SteerCos to align risk strategies and ensure accountability.
  • Serve as the key contact for internal and external auditors, ensuring findings are captured, tracked, and remediated.
  • Build and execute strategies to manage vendor and service provider risks, from due diligence through to ongoing oversight.
  • Grow and mentor the IT Risk team, fostering a culture of proactive risk awareness and continuous improvement across the business.
  • Provide leadership during IT incidents, ensuring lessons learned translate into stronger controls and resilience.

You're Likely a Match If You Have:

You're a trusted leader who can see the bigger picture without losing sight of the details. You balance technical expertise with strong business acumen, and you thrive in environments where you can influence, challenge, and partner with executives to create meaningful impact.

You'll bring:

  • Proven experience leading IT risk management in a large, complex organisation.
  • Strong knowledge of frameworks such as ISO 31000, NIST CSF, Essential 8, and COBIT.
  • Experience implementing and maintaining IT GRC systems, risk tooling, and executive dashboarding.
  • Demonstrated success in third-party/vendor risk management and SLA oversight.
  • Relevant certifications such as CRISC, CISA, CISM, or CISSP.
  • Excellent communication skills — able to translate technical risk into plain language for executives and boards.
  • A collaborative leadership style that inspires teams and drives cultural change.
  • Resilience under pressure, with the ability to act decisively during incidents.

Bonus points for:

  • Experience in logistics, supermarkets, retail, wholesale, or critical infrastructure industries.

What's on Offer
Extra Leave: 5th week of annual leave, 2 well-being days, 1 volunteer day
Career Growth: Endless learning and development opportunities
Parental Leave: 12 weeks of gender-neutral paid leave for primary carers
Inclusive Culture: Bronze Employer for LGBTQ Inclusion
Neutral Pay Gap: Gender pay gap under 5% (WGEA 2024–2025)
Mental Health: Gold accreditation by Mental Health Australia
Flexibility: Flex Ready and Family Friendly Workplace accredited

About Us

Metcash is Australia's leading wholesale distribution company, with $19.5 billion in sales (FY25) and a proud spot in the ASX Top 125. We believe in the power of independent, family-owned businesses to shape vibrant communities. Through our food, liquor, and hardware pillars, we help retailers become the 'Best Store in Their Town' by providing merchandising, operational and marketing support.
We're committed to diversity, inclusion, and sustainability — and we welcome applicants from all backgrounds, including First Nations. If you need support during the application process, just let us know. Your privacy and dignity are always respected.

Join us and be part of something bigger

#INFLA

#LI-SS1



  • Sydney, New South Wales, Australia Westpac Group Full time

    Join to apply for the Head of Operational and Enterprise Risk role at Westpac Group We are seeking a strategic and experienced leader to join us as the Head of Operational and Enterprise Risk. This critical role will drive thought leadership in the delivery of our strategic approach to Operational, Enterprise and Strategic Risk frameworks, policies, and...


  • Sydney, New South Wales, Australia Westpac Group Full time

    Join to apply for the Head of Operational and Enterprise Risk role at Westpac GroupWe are seeking a strategic and experienced leader to join us as the Head of Operational and Enterprise Risk. This critical role will drive thought leadership in the delivery of our strategic approach to Operational, Enterprise and Strategic Risk frameworks, policies, and...

  • Group Risk

    1 week ago


    Sydney, New South Wales, Australia endeavour group careers Full time $120,000 - $180,000 per year

    Company Description Let's create a more sociable future togetherAt Endeavour Group, we're Australia's leading retail drinks network through our beloved Dan Murphy's and BWS brands, we operate the country's largest portfolio of licensed hotels and we even have our own range of drinks through Pinnacle Drinks. We're passionate about bringing people together and...

  • Group Risk

    7 days ago


    Sydney, New South Wales, Australia endeavour group careers Full time $120,000 - $180,000 per year

    Company Description Let's create a more sociable future togetherAt Endeavour Group, we're Australia's leading retail drinks network through our beloved Dan Murphy's and BWS brands, we operate the country's largest portfolio of licensed hotels and we even have our own range of drinks through Pinnacle Drinks. We're passionate about bringing people together and...


  • Sydney, New South Wales, Australia Westpac Group Full time $180,000 - $250,000 per year

    Job DescriptionWhat's the role?We are seeking a strategic and experienced leader to join us as the Head of Operational and Enterprise Risk. This critical role will drive thought leadership in the delivery of our strategic approach to Operational, Enterprise and Strategic Risk frameworks, policies, and aggregated reporting to support the Group CRO, Executive...


  • Sydney, New South Wales, Australia Bank of Queensland Full time $80,000 - $120,000 per year

    About the RoleOver six months, starting in late October 2025, you'll engage in projects designed to challenge you while delivering work that helps BOQ Group be the bank customers choose. We'll work around your university schedule to ensure you can balance your studies and internship commitments.In this program, you'll gain hands-on, on-the-job experience...


  • Sydney, New South Wales, Australia Buscojobs Full time

    ING Australia is seeking to appoint a Head of Operational Risk to lead our second line of defence team in Sydney.Reporting locally to our CRO and globally to our Head of NFR Retail Rest of World, this senior leadership role involves developing and managing the NFR framework, policies, and procedures, as well as advising on their implementation and assessing...

  • Head of Risk

    2 days ago


    Sydney, New South Wales, Australia Australian Nuclear Science and Technology Organisation Full time $120,000 - $180,000 per year

    Company description: ANSTOJob description: Position OverviewOngoing | Full Time | Salary commensurate with experience | 15.4% superSutherland Shire location I Flexible Work practices I Health & Wellbeing ProgramsOnsite Childcare for Employees | Cafe on site | generous leave provisions | free parkingA unique opportunity to join one of Australia's leading...


  • Sydney, New South Wales, Australia ING Australia Full time

    Join to apply for the Head of Operational Risk role at ING Australia Join to apply for the Head of Operational Risk role at ING Australia Direct message the job poster from ING Australia Talent Acquisition Professional | Strategic Recruiter | Global Talent Expert | Achieving Recruitment Success | Passionate about Diverse Teams ING Australia are looking to...


  • Sydney, New South Wales, Australia ING Australia Full time

    Join to apply for the Head of Operational Risk role at ING Australia Join to apply for the Head of Operational Risk role at ING Australia Direct message the job poster from ING Australia Talent Acquisition Professional | Strategic Recruiter | Global Talent Expert | Achieving Recruitment Success | Passionate about Diverse Teams ING Australia are looking...