Senior Associate, Technology Risk

About this role

Our Technology Risk practice is a growing national business responsible for delivering consulting and assurance engagements that deal with security, availability, processing integrity, change management and project/program assurance. We work across industries with particular focuses in financial services, technology, public sector and non for profit.

Location

Sydney office.

Key Responsibilities

• Deliver cyber and technology risk advisory engagements, including cyber security risk assessments, security assurance reviews and compliance assessments aligned to recognised frameworks such as ISO27001, NIST, PCI DSS, SOC2, GS007, and data risk/governance and privacy.
• Conduct IT risk reviews against security frameworks such as COBIT, PCI DSS, ISO27001 and NIST to identify vulnerabilities, assess cyber threats and determine effectiveness of existing controls.
• Assess the design and operating effectiveness of technology controls, including general IT controls (GITCs), application controls and cyber security frameworks.
• Apply relevant standards and frameworks such as SOC2, GS007, ISO27001 and NIST to assess compliance.
• Support clients to uplift cyber security governance, policies, standards and control environments through risk based recommendations and pragmatic remediation roadmaps.
• Work with managers to develop and present tailored recommendations to mitigate identified technology risks and enhance control effectiveness.
• Review and quality check findings and recommendations, ensuring alignment with the client's broader business context and strategic objectives.
• With oversight from a manager, deliver end to end client engagements including planning, execution, and reporting of cyber and technology risk assessments, control reviews and remediation recommendations.
• Deliver on site engagements, managing client interactions and overseeing junior team members.

Skills & Experience

• Experience in a technology risk role in an assurance or consulting environment.
• Degree qualified in Technology preferred.
• Good understanding of technology risks including cyber security, change management, project management and technology general controls.
• Strong understanding of controls, including the ability to create quality testing documentation and perform gap assessments.
• Experience with controls auditing standards such as SOC 2 and GS007.
• A client centric attitude, with the ability to engage with clients and diverse stakeholder groups across all levels of a client's businesses.
• Focus on internal/external outcomes with attention to detail and organisational skills.
• Strong communication skills with the ability to present to clients.
• Ability to manage multiple projects/assignments simultaneously.

Salary

$100,000 to $110,000 per annum inclusive of superannuation.

Benefits

• Flexible working options including a trial 9 day fortnight model with 100% pay.
• Free annual gym membership.
• Active employee networks and social committees.
• Family focused support with 26 weeks parental leave and a parental leave superannuation scheme.
• Mental health and wellbeing resources and coaching.
• Funded CA qualification and additional study support.

Equal Opportunity

We are committed to ensuring our recruitment process is inclusive and accessible for anyone who wishes to apply. We warmly encourage applications from individuals from diverse backgrounds, including Aboriginal and/or Torres Strait Islanders, those in the LGBTQI+ community, and individuals who identify as having a disability or are neurodivergent. If you have any adaptations or additional support needed for your individual circumstances, please contact our Talent Acquisition team at .