Technology Governance & Risk LeadAustralian Financial Complaints Authority · Sydney, New South Wales, Australia

Technology Governance & Risk Lead

🗓️ Posted 2026-09-07 Sydney, New South Wales, Australia Full-time Hybrid ICT
💰 Salary Not shared 📊 Market A$10,833–A$15,000/mo

About the Company

Make a real impact at AFCA. Where fairness drives every decision. Help us deliver world-class, independent complaints resolution for Australians. As a not-for-profit and progressive financial ombudsman, we're championing positive change. Achieving our purpose takes progressive thinking, accountability and resilience. At AFCA, our inclusive leadership values every voice. We offer our people flexible work options, thoughtful benefits and opportunities to deepen expertise. Flourish in a diverse, caring culture. Feel the difference of belonging to an organisation intentionally designed to put people first. Help shape how technology risk is governed across one of Australia's most important consumer-facing organisations. AFCA is building a world-first scams prevention capability designed to benefit all Australians, alongside major transformation across digital services, identity and access management, data and technology. This role offers a rare opportunity to establish the governance, risk and assurance foundations that will help these capabilities operate securely, responsibly and at scale. We're looking for a Senior Technology Governance & Risk Lead to build and mature AFCA's technology and cyber risk capability. Reporting directly to the Chief Information Security Officer (CISO), you'll have the mandate to improve how technology risks are identified, assessed, governed and communicated across major transformation programs and business-as-usual operations. This is a hands-on leadership role for someone who enjoys turning frameworks into practical ways of working. You'll partner with senior technology, risk, architecture, data, privacy and delivery leaders to strengthen governance without creating unnecessary friction for delivery. In This Role You Will Lead and mature AFCA's technology and cyber risk management framework, operating model and governance practices. Establish clear, actionable technology and cyber risk registers, with meaningful ownership, treatment

Requirements

  • ● You're a strategic and commercially aware cyber risk professional who can translate complexity into clear, actionable insights.
  • ● Significant experience in technology risk, cyber risk, governance, assurance or a related discipline.
  • ● Experience building or maturing practical technology risk frameworks, risk registers and control environments.
  • ● Strong working knowledge of recognised frameworks such as ISO 27001, ISO42001, NIST CSF, the Essential Eight, CPS 234 or equivalent.
  • ● Experience coordinating audit and assurance activities and driving remediation through accountable business and technology owners.
  • ● Practical experience with third-party technology or security risk.
  • ● The ability to translate complex risk and control issues into clear decisions, priorities and executive-level reporting.
  • ● Confidence partnering with engineers, architects, product teams, senior leaders, risk specialists and external providers.
  • ● A pragmatic mindset that balances risk, regulatory expectations, customer outcomes and delivery velocity.
  • ● Strong written communication, facilitation and stakeholder-influencing skills.
  • ● Curiosity, sound judgement and a willingness to challenge established ways of working
  • ● Silver AWEI Accreditation 2025 - Recognised for LGBTQ+ workplace inclusion.
  • ● Accredited Family Friendly Workplace - Supporting work-life balance and inclusivity.
  • ● Hybrid working - Flexible arrangements with two days a week in our modern offices designed for collaboration and wellbeing.
  • ● Additional and inclusive leave options - Flexible public holidays, gender affirmation leave, women's health leave, and bonus paid time off over the end of year holiday period.