Analyst - Technology and Data Risk

Cbus

Cbus, a leading Australian superannuation fund established by workers, provides comprehensive retirement solutions across various industries. The company is recognized for its strong member benefits and innovative investments, maintaining a commitment to ethical practices. The Analyst, Technology & Data Risk role is integral to the Risk & Compliance team, focusing on the strategic development of technology and data risk management.

In this role you can expect to have the responsibilities:

• Support the implementation of a Line 1 technology risk governance framework.
• Assist in formulating technology risk management policies and strategies.
• Conduct and analyze risk assessments to manage technology and data risks effectively.
• Maintain a detailed risk register and develop plans to manage identified risks.
• Ensure ongoing compliance with regulatory and policy requirements.
• Conduct workshops and testing to assess control effectiveness.
• Develop risk dashboards and communication reports for stakeholders.
• Evaluate resource needs and collaborate with teams for effective allocation.
• Facilitate training programs to enhance staff policy awareness.
• Engage with stakeholders to align operational and risk management goals.

This role comes with the following benefits:

• Working for a recognized and award-winning superannuation fund
• Engagement in a dynamic and supportive team environment
• Opportunities for professional development

This role requires you to have:

• Bachelor's degree in IT or Information Security
• 5+ years of experience in IT audit or technology risk management
• Knowledge of Australian financial services risk frameworks
• Strong verbal and written communication skills

You would benefit from having:

• Certifications such as CRISC, CDPSE, or CISA
• Experience with APRA CPS 234, CPS 230, ISO 27001, NIST CSF, ISO 31000

Cbus is an inclusive employer, valuing diversity in backgrounds and perspectives. They encourage applications from individuals of all abilities and encourage applicants to apply even if not meeting all criteria. They ensure recruitment is managed internally with no external agencies involved.