Senior Risk and Compliance Specialist – Technology Strategy and Governance

We’re all about helping our members make the most of their money. And while they go after their goals, you can too. As a Senior Risk and Compliance Specialist, Technology Strategy & Governance, you’ll have the opportunity to shape how risk is understood, managed and embedded across a critical Technology function supporting 2.4 million members and over $330 billion in retirement savings.

In this role, you’ll be a trusted Line 1 risk partner, working closely with Technology leaders, project teams and risk stakeholders to drive practical, commercially balanced risk management across operations, transformation initiatives and third-party environments. You’ll play a key role in strengthening governance, improving risk visibility and helping teams make better decisions in a fast-moving technology landscape.

From risk-in-change to APRA alignment, your work will directly contribute to more resilient services, stronger accountability and better outcomes for our members. You’ll bring insight, challenge and practical guidance to help Technology teams identify what matters most, manage risks early and deliver change with confidence.

You’ll also help uplift risk maturity across Technology by building capability, improving the quality of risk insights and ensuring the Technology risk profile is clear, accurate and actionable. If you enjoy influencing senior stakeholders, solving complex problems and turning risk into real business value, this is a meaningful opportunity to make an impact.

This role is a permanent opportunity and is based in Brisbane or Sydney.

•    Partner with Technology teams to embed the Risk Management Framework into everyday decision-making, delivery practices and governance routines.
•    Shape practical, fit-for-purpose risk assessments across technology projects, operations, transformation initiatives and governance forums.
•    Provide proactive risk-in-change guidance to help teams identify, assess and manage delivery risks early and with confidence.
•    Develop clear, insightful risk reporting, committee papers and governance materials that support senior stakeholder decisions.
•    Identify, assess and manage technology, operational and third-party risks, ensuring key risks are visible, understood and actively owned.
•    Strengthen control design, control assessment and monitoring activities to improve the effectiveness of the Technology control environment.
•    Drive timely issue, incident and remediation management, including root cause analysis, action tracking and sustainable risk reduction.
•    Contribute to APRA compliance, regulatory responses and uplift initiatives that strengthen resilience, accountability and governance maturity.
•    Build trusted relationships with Technology leaders, project teams and risk stakeholders to promote ownership, challenge and constructive risk conversations.
•    Uplift risk culture, capability and awareness across Technology by translating risk expectations into practical guidance and business value.

It goes without saying you'll be a great communicator with top notch interpersonal skills. We'll also expect you to pick up problems and come up with quick, creative ways to solve them. It's quite likely you tick some of the following boxes too:

•    You have experience in technology risk, operational risk, or compliance within a regulated environment.
•    Your background includes applying APRA prudential standards across technology, security or resilience.
•    You'll bring experience supporting risk assessments, controls management and risk reporting.
•    You're confident working with project teams on delivery risk and risk-in-change activities.
•    You understand governance frameworks, risk appetite and control environments.
•    Your ability to analyse risk data and identify insights supports better decision-making.
•    You'll have strong written skills, with experience preparing clear and concise reporting.
•    You're experienced working with technology stakeholders and senior leaders.
•    You may hold relevant qualifications or certifications such as CRISC, CISA, CISM or similar.
•    Your experience may include financial services, superannuation or another APRA-regulated industry.