About the Role
Act as the senior Line 1 owner of technology risk enablement and controls for ASX, translating enterprise risk frameworks into a coherent technology risk taxonomy, control environment, and assessment approach that supports scalable risk management, assurance, and regulatory outcomes.
Responsibilities
- Own and lead the Line 1 technology risk and controls enablement capability, determining how enterprise risk & compliance frameworks are translated into practical, scalable, and ASX Technology divisional, as well as technology and cyber risk specific approaches.
- Design, evolve, and govern the technology and cyber risk ecosystem of taxonomies, metrics, control frameworks, policies, and assessment approaches, ensuring coherence, usability, alignment to internal and external expectations, and best practice.
- Develop new risk and control approaches where gaps exist, including defining trade-state practices, implementation plans, guidance, and transition pathways, to uplift maturity.
- Own the ITGC library, including maintaining artefacts, facilitating changes, coordinating control rollout, and assurance activities.
- Evolve integrated IT system-level risk reporting towards data-driven outputs considering risk maturity.
- Provide authoritative Line 1 input into enterprise frameworks, such as risk & compliance and criticality tiering methodologies, ensuring divisional and technology/cyber risk considerations are accurately reflected and grounded in operational reality.
- Lead the development of guidance, playbooks, and education for the division and for technology/cyber risk across the enterprise, embedding risk and controls into day-to-day technology delivery and operations.
- Drive continual uplift of the technology risk ecosystem through simplification, standardisation, automation, and clear ownership.
- Lead, coach, and support a team of risk practitioners in an environment with competing priorities and elevated risk exposure, building autonomy and uplifting risk maturity.
Requirements
- Significant experience in technology risk and/or compliance roles (Line 1, Line 2, or Line 3) with credibility and judgment to operate autonomously in a senior Line 1 leadership capacity.
- Demonstrated ability to translate enterprise risk standards and frameworks into fit-for-purpose technology practices and operationalize them across complex environments.
- Strong technology and cyber risk expertise with sufficient technical depth to engage credibly with SMEs.
- Proven capability to develop, own, and evolve risk and control artefacts, maintaining coherence, usability, and scalability.
- Demonstrated ability to exercise sound risk judgment at system level, including making trade-offs and adapting approaches.
- Strong leadership capability in ambiguous and evolving environments, including structuring work, setting direction, and driving outcomes.
- People leadership capability, including coaching and developing experienced practitioners and building confidence, judgment, and autonomy in others.
- Experience operating in regulated, critical, or high-reliability environments (nice to have).
- Risk-related certification (CISA, CISSP, etc.) or equivalent professional standing (nice to have).
- Familiarity with recognised technology and risk frameworks such as NIST, ITIL, COSO (nice to have).
- Exposure to emerging technology risk areas such as AI, cloud at scale, continuous deployment (nice to have).
- Candidates must be legally authorised to work in Australia on a permanent basis without any restrictions.
Skills
- Technology risk
- Compliance
- Risk management
- Control environment
- Risk taxonomy
- Assessment approach
- Technology and cyber risk
- Risk frameworks
- ITGC library
- Risk reporting
- NIST
- ITIL
- COSO
- AI risk
- Cloud risk
- Continuous deployment risk
Location
- Australia
Work Type
- Hybrid working options
- Flexible working arrangements
- Full-time
Experience Level
- Senior
- Line 1 leadership
Benefits
- Impressive range of employee benefits
- Flexible working environment
About the Company
- ASX is powering Australia's financial markets and aims to foster a stronger economic future by enabling a fair and dynamic marketplace.
- ASX is a leading global securities exchange, a trusted market operator, and an exciting data hub.
- The ASX team brings together talented people from diverse disciplines, running critical market infrastructure with a significant technology focus.
- ASX fosters a workplace where diversity is celebrated and inclusion is part of the everyday culture, with employee-led networks championing various inclusion initiatives.
- ASX is an AWEI Bronze employer and a member of the Champions of Change Coalition for gender equality.
- ASX is an integrated exchange offering listings, trading, clearing, settlement, technical and information services, technology, data, and other post-trade services.
- ASX operates markets for a wide range of asset classes including equities, fixed income, commodities, and energy.
- ASX is a dynamic global leader with a record of innovation and a reputation for integrity, transparency, and professionalism.
Equal Opportunity
- We make hiring decisions based on your skills, capabilities, and experience, and how you’ll help us to live our values.
- We encourage you to apply even if you don’t meet all the criteria of this role.
- If you need any adjustments during the application or interview process to help you present your best self, please let us know at careers@asx.com.au.
- At ASX Group, our diverse workforce is essential to build and maintain a fair and dynamic marketplace.
- We support flexible working and offer hybrid working options.
- Even if our roles are advertised as full-time, we encourage you to apply if you are interested in part-time or other flexible working arrangements.
