Manager - Technology Risk

About the Role

This role offers a hybrid and flexible working environment based in a new facility with excellent views and nearby cafes. Employees can enjoy a variety of benefits including discounts on private health insurance, superannuation options, salary packaging, and the ability to buy or sell leave, among others.

Job Responsibilities

• Function as a second line reviewer to ensure the organization adheres to technology risk management frameworks, policies, and procedures.
• Collaborate with business teams to provide oversight, challenge approaches, offer guidance, and support risk-based decision making.
• Lead identification and management of significant technology risks ensuring compliance across all technology teams.
• Develop technology risk management strategies, policies, processes, and work plans.
• Engage in ITS and business projects from a technology risk perspective, offering advisory services and recommendations.
• Assess security architecture and related policies for infrastructure, applications, and cyber resilience.
• Conduct second line assurance reviews and prepare management reports summarizing technology risk assessments and findings.
• Provide constructive, well-reasoned opinions on risk management practices to stakeholders.

Additional Duties

• Become proficient and an expert in Governance, Risk & Compliance (GRC) frameworks, such as ISO27001 and SOC2 standards.
• Perform comprehensive risk assessments of facilities and ICT networks based on internal security standards and industry best practices.
• Stay informed about security threats and open source intelligence.
• Educate colleagues and the wider Deloitte community on current security industry trends.
• Maintain and nurture effective relationships with key internal and external stakeholders.

Desired Profile

• Bachelor's degree in Information Technology or a related discipline.
• 4 to 5 years of relevant experience in Technology Risk Management or IT Risk Management roles.
• Relevant industry certifications such as CISA or CISSP are preferred.
• Ability to work independently, remain calm under pressure, and be a strong team player.
• In-depth understanding of technology-related risks.
• Excellent stakeholder management skills with strong influencing capabilities.
• Highly developed written and verbal communication skills including presentations.
• Ability to thrive in a dynamic, fast-paced work environment with meticulous attention to detail.

About the Team

The Business Security Office (BSO) at Deloitte oversees a wide range of programs related to information security, privacy, resilience, and workplace safety to protect client data and employees. The Technology Risk Team within the BSO maintains and improves the organization's technology risk posture, focusing on physical, personnel, governance, and cyber security, as well as managing enterprise security programs like ISO27001 and SOC2.

Why Join Deloitte?

Deloitte is committed to creating outstanding work experiences, fostering diversity and inclusion, and supporting career growth across Asia Pacific. The company promotes a respectful and safe workplace through various employee-led diversity networks and has been recognized for efforts to inspire change and accelerate progress.

Next Steps

If this opportunity aligns with your career aspirations, we encourage you to apply. All candidates will be assessed according to Deloitte’s Talent Standards and may undergo background screening.