Incident and Crisis Management Lead

We’re all about helping our members make the most of their money. And while they go after their goals, you can too. As an Incident and Crisis Management Lead, you’ll play a critical role in strengthening how Australian Retirement Trust prepares for, responds to and recovers from significant incidents and crises.

Sitting within Risk & Compliance, you’ll lead the practical integration of our incident and crisis governance, plans, playbooks, communications, training and exercises across the organisation. You’ll work closely with senior leaders and specialist teams to ensure our response arrangements are practical, connected and ready to operate under severe but plausible conditions.

This is a genuinely hands-on resilience role. From leading enterprise scenario exercises and identifying vulnerabilities to coordinating the response to significant incidents, you’ll help protect our members, sustain critical operations and ensure we continue to meet our prudential obligations, including CPS 230.

This role is a permanent opportunity and is based in Brisbane, Sydney, and Melbourne.

Day to day, you'll:

• Own and maintain ART’s enterprise incident and crisis management framework, policies, plans, playbooks, procedures and supporting tools.
• Coordinate enterprise responses to significant incidents and crises, including escalation, mobilisation, decision support, action tracking, handovers and recovery.
• Maintain clear crisis governance, including activation triggers, escalation pathways, decision authorities and responsibilities.
• Lead incident response teams through effective briefings, decision logs, action registers, status reporting and response rhythms.
• Develop practical response options that help sustain critical operations when technology, service providers, payments, data, premises or other critical dependencies are disrupted.
• Design and deliver an enterprise crisis exercise and scenario-testing program using severe but plausible scenarios.
• Test how plans and specialist response arrangements work together during prolonged, evolving and multi-domain disruptions.
• Identify gaps, vulnerabilities, dependencies and untested assumptions, and drive remediation to strengthen organisational readiness.
• Partner with Corporate Affairs and business stakeholders to strengthen crisis communication arrangements, protocols and resilient communication channels.
• Provide clear reporting and readiness insights to senior management, Executive forums, Board committees and the Board.
• Help ensure incident and crisis arrangements align with CPS 230, business continuity, critical operations, tolerance levels and material service provider management.
• Provide calm, authoritative advice when it matters most, including constructively challenging senior stakeholders where escalation or further action is required.

It goes without saying you'll be a great communicator with top notch interpersonal skills. We'll also expect you to pick up problems and come up with quick, creative ways to solve them. It's quite likely you tick some of the following boxes too:

• You bring demonstrated experience across operational resilience, business resilience and enterprise crisis management.
• Your experience includes working within a regulated environment, with strong knowledge and practical understanding of CPS 230.
• You'll have extensive experience designing, facilitating and evaluating enterprise exercises involving severe but plausible scenarios.
• You're comfortable working across complex, multi-domain or prolonged disruptions and translating lessons into practical improvements.
• You can remain composed and make sound decisions when information is incomplete, circumstances are changing and time is critical.
• Your stakeholder management skills allow you to engage and influence effectively across senior leadership, Executive and specialist teams.
• You'll bring a pragmatic, proactive approach to risk management and the ability to turn frameworks and plans into arrangements that work in practice.
• You're confident constructively challenging decisions, assumptions and risk acceptance where stronger action may be required.
• You hold a relevant tertiary qualification, with further postgraduate qualifications viewed favourably.
• Your understanding of APRA requirements, information technology disaster recovery or other relevant industry standards will be highly regarded.