Job Description

An opportunity exists for a Head of Technology Governance, Risk & Compliance to lead and strengthen Downer’s enterprise technology risk framework across IT, cybersecurity, data, and third-party risk domains.

Reporting to the Chief Information Officer, this role provides strategic leadership, independent assurance, and oversight to ensure technology operations remain resilient, compliant, and aligned with business objectives and risk appetite.

This is a critical leadership role partnering across Digital, Finance, and business units to embed effective governance, uplift risk maturity, and support ongoing transformation initiatives.

Key Responsibilities

• Lead the development and implementation of enterprise-wide technology governance, risk and compliance frameworks
• Provide independent oversight and assurance across technology, cybersecurity, data, and third-party risk
• Partner with senior stakeholders to align risk management practices with business strategy and risk appetite
• Establish and monitor risk metrics, reporting frameworks, and executive-level insights
• Drive continuous improvement in control environments, governance practices, and compliance maturity
• Oversee audit readiness, regulatory compliance, and remediation activities across technology domains
• Lead and develop a high-performing team, fostering a culture of accountability, collaboration, and continuous improvement
• Support major transformation initiatives by embedding risk and governance practices into delivery

What You Will Bring

• Extensive experience (15+ years) in technology risk, IT governance, or cybersecurity leadership roles
• Strong knowledge of frameworks such as COBIT, ISO 27001, NIST, and ITIL
• Proven experience designing and implementing enterprise risk and governance frameworks
• Demonstrated ability to influence and engage senior stakeholders, including executive and board-level audiences
• Strong leadership capability with experience building and leading multidisciplinary teams
• Expertise across cybersecurity, compliance, audit, third-party risk, and enterprise technology environments
• Commercial acumen with the ability to balance risk, cost, and business outcomes
• A continuous improvement mindset with a focus on innovation, automation, and uplift in risk maturity

Benefits Of Working with Downer

• Work with an ASX/NZX listed company, working with market leaders in infrastructure services.
• Grow your career with us, we are passionate about giving our people opportunities to grow through personal and professional development and continuous learning:
  • Professional development programs
    • Access to professional memberships and industry networks
• Be part of a team that cares, we foster a work environment built on support that is flexible around our employee’s wellbeing needs:
  • Flexible work arrangements
    • Parental leave
    • Employee Assistance Program
    • Programs promoting diversity and inclusion
• A range of Corporate Benefits, including: 
  • Discounted services through Perks@Downer (car hires, hotels, insurance, retail stores, gyms)
    • Volunteering day
    • Marram subsidised healthcare

Why Downer?

You want your work to matter and so do we. With over 26,000 people across Australia, New Zealand and the Pacific, our team is made up of individuals with unique perspectives, backgrounds, and ideas.

We know that diversity makes us stronger and we actively celebrate it through our commitment to inclusion and belonging.

We’re committed to building a team that reflects the diverse communities we serve and we welcome people of all ages, genders, sexual orientations, cultures, abilities, and lived experiences. We especially encourage applications from those whose voices have traditionally been underrepresented in our industry, including women Māori and Pasifika Peoples, Aboriginal and Torres Strait Islander Peoples, veterans, people with disability, and neurodivergent individuals. Even if your experience doesn’t align perfectly with this role, we’d still like to hear from you. If it feels like the right fit, apply - potential counts, and so do you.