Risk & Resilience Lead

**About Ampol**

Powering better journeys, today and tomorrow.

Our company has always been about more than fuel. Fuel may be the foundation of our business, but our motivation and purpose comes from the people, businesses, industries and communities we engage with. From our origins until today, we've always been inspired by the role we can play in people's lives - to keep them moving, to make journeys happen. Here at Ampol, we are proud of our heritage as Australia's only owned fuel brand.

For over 100 years we have supported Australians to travel far and wide, and we'll be here for 100 more powering better journeys for today and tomorrow.

As we embark on our digital transformation, we are committed to making Ampol easier to work with and within, enhancing every interaction through innovative solutions.

Our approach is anchored in data-driven decision-making and advanced technology integration, allowing us to create seamless and personalised customer experiences that truly resonate. By prioritizing value-based decisions and outcomes, we ensure that our digital transformation will drive meaningful impact and measurable outcomes.

We are dedicated to empowering our business through technology-enabled differentiation, strengthening our foundations to build sustainable value for the future. Our team thrives on the challenge of innovation—dreaming up big ideas, questioning the norm, and tackling complex problems. Together, we are shaping a future that not only meets the needs of today but anticipates the demands of tomorrow.

Join us as we embrace this journey of transformation, committed to delivering exceptional value and experiences that make a lasting impact on our business, customers and industry.

**About the role**:
The Cyber, Risk & Governance teams' purpose is to protect Ampol Group's reputation and social license to operate by enhancing our cyber resilience. We support Ampol Group in achieving its business goals by managing cyber and IT risks effectively and pragmatically and by adopting a proactive approach. We enable business value rather than being a barrier. Through early detection and response to cyber events, we mitigate risks and deliver business value in the face of ever-changing technologies and strategic opportunities. Additionally, we build trust in Ampol with our customers through the delivery of more secure solutions.

The Risk & Resilience Lead plays a critical role in identifying, assessing and monitoring treatment of risks that could impact Ampol's operations. The position ensures the continuous reduction of risk and analysis of resilience capabilities to safeguard assets and recover from disruptions.

**You'll take us further by**:

- Identify, assess, document risks and associated treatment actions with key stakeholders.
- Monitor and manage risks in alignment with Ampol's Risk Management standards.
- Monitor and drive continuous improvement activities across technology teams in alignment with Ampol's Disaster Recovery standard.
- Support the completion of control assurance activities.
- Quality assurance activities across Disaster Recovery Planning & Testing and associated reporting.
- Work closely with Technology Managers to support the improvement of disaster recovery plans & tests, including failover and restoration from backup strategies.
- Build strong relationships with stakeholders across Ampol including technology managers within TDD (technology, digital & data) function and more broadly across operational technology and business implemented systems.
- Support management reporting activities to highlight strengths, weaknesses, and opportunities.

**We'd love it if you have**:

- Extensive experience working as part of internal IT organisations in risk, disaster recovery, governance, business analyst or similar related roles.
- Expertise in delivering Disaster Recovery, Crisis Management or Business Continuity plans and exercises/tests.
- Experience delivering initiatives with indirect reports across a diverse business landscape.
- An understanding of enterprise & regulatory frameworks such as ISO31000, SOCI, Privacy Act.
- Hands on experience embedding risk & resilience into decision making across complex organisations.
- A collaborative mindset that brings together finance, operations, technology & compliance considerations to risk assessment activities.
- An empathetic approach to change management, helping teams build risk & resilience awareness through storytelling & practical tools.
- Analytical rigour balanced with the ability to drive stakeholder decision making that efficiently translates uncertainty into action.

**We'll take you further by**:

- Our total remuneration is competitive. This is across base salary, a performance incentive, employee share offers and a 25% discount on Fuel for two privately used cars
- We are flexible. Many of our teams have embraced hybrid work, balancing time spent remote working, with time spent at an office to connect and work to