Job Description

About Us

At ANZ, we're shaping a world where people and communities thrive, driven by a common goal: to improve the financial wellbeing and sustainability of our millions of customers.

About the Role

In this position in our Risk, Group Technology Team, you’ll play a key role in linking independent Line 2 oversight of Technology and Information Security (Cyber) risk to business value chains, providing clear risk insight and credible challenge so the Board, Executive Committee and regulators understand material risk positions and impacts on customer outcomes.

Acting as the primary Line 2 risk advisory conduit between Technology and Cyber risk specialists and business-facing divisional Line 2 risk teams, you will translate technical risk positions, control themes and change impacts into value-chain aligned risk profile insights across Retail, Business and Private Bank and Institutional Bank.

Leading a team of Risk Managers and Associate Risk Managers, you will review and challenge Technology and Cyber risk in end-to-end value chains and related risk profiles, producing data-led insights that connect risks, controls and change to business impacts, service resilience and customer outcomes across technology domains, cross-cutting disciplines and major programs.

You will partner with fellow Risk Managers, Group Technology, Information Security, Divisional Risk teams and other Risk specialists to strengthen technology and cyber risk management through independent oversight, advice and challenge, influencing the evolution of risk appetite, metrics and oversight priorities via constructive challenge, executive-ready risk opinions and escalation of material concerns.

Banking is changing and we’re changing with it, giving our people great opportunities to try new things, learn and grow. Whatever your role at ANZ, you’ll be building your future, while helping to build ours.

Role Type: Permanent

Role Location: Melbourne or Brisbane

Work Hours: Full time

What will your day look like?

In this role you will:

• Setting the Line 2 oversight plan and operating rhythm for technology and cyber risks across key business value chains, aligned to risk appetite, regulatory expectations and customer/critical service impact, prioritising activity that drives measurable NFR uplift.
• Advising, reviewing and challenging the evolution of the Technology & Cyber risk management approach, including risk appetite statements and Board-level metrics, ensuring value-chain impacts are explicit and decision-useful for divisional governance.
• Maintaining independent view of material, systemic and emerging technology and cyber risks and indicators; translating material themes into value-chain risk implications and escalating through governance to inform prioritisation and decision-making.
• Refreshing material risk themes and oversight priorities (annual and in-year), informed by horizon scanning and forward-looking stress/scenario considerations, and calibrated to divisional risk profiles.
• Providing independent oversight, review and challenge of technology and cyber risks and controls, focusing on how control effectiveness and weaknesses manifest across business value chains.
• Forming and communicating defensible Line 2 positions on control effectiveness, remediation credibility, residual risk and risk acceptance, translated into value-chain risk language for divisional Line 2 stakeholders.
• Providing independent challenge on risk-in-change for material business change initiatives involving technology, including treatment and remediation plans, risk acceptances and residual risk assessments.
• Overseeing key technology programs that materially impact value chains and business processes, forming Line 2 opinions on delivery risk and impacts to resilience and customer outcomes.
• Setting evidence and quality standards for Line 2 opinions, including traceability from risk to controls to outcomes, and ensuring consistency in advisory outputs shared with divisional Line 2 teams.
• Acting as the key Line 2 relationship lead between Technology and Cyber risk specialists and business-facing divisional Line 2 teams, ensuring consistent messaging, escalation and decision-making.
• Producing clear, executive-ready Line 2 risk opinions and briefings that articulate value-chain impacts, trade-offs, customer outcomes and required actions.
• Providing challenge and insight in governance forums; reviewing and challenging papers to clearly articulate technology and cyber risks in value-chain terms, including options, decisions required and anticipated customer consequences.
• Strengthening PACT-aligned NFR outcomes through independent oversight, review and challenge focused on control maturity, remediation sustainability and resilience outcomes, with escalation where Line 1 delivery is not effective.
• Maintaining an insights-led view of technology and cyber risks with KRIs/KPIs, control maturity, incidents and change signals, translating trends into value-chain hotspots to target oversight and divisional engagement.
• Synthesizing themes from reviews, incidents and assurance outcomes into systemic root causes and recommendations that are actionable for both Technology and Divisional value-chain risk owners.
• Developing team capability (workforce planning, coaching and performance), building strong Line 2 risk judgement and the ability to translate technical risk into value-chain language.
• Building and sustaining business and customer-oriented communities of practice across Technology Risk specialists and divisional Line 2 teams to promote knowledge sharing, consistency and professional excellence.

What will you bring?

To grow and be successful in this role, you will ideally bring the following:

• Extensive senior leader experience in Line 2 Technology Risk Cyber Risk or Operational Risk or Assurance within a complex, APRA-regulated (or equivalent) environment.
• Deep knowledge of technology, cyber and operational resilience risk domains, with the ability to translate technical control themes into business and customer impacts.
• Proven ability to form, document and defend Line 2 risk opinions on control effectiveness, remediation credibility, residual risk and risk acceptance.
• Strong knowledge of one or more banking value chain across Retail, Business and Private Bank, and/or Institutional Bank, including key products, processes, customer journeys and operational dependencies.
• Demonstrated ability to partner with business-facing divisional Line 2 risk teams to integrate technology and cyber risk into value-chain risk profiles, reporting and governance.
• Experience advising, reviewing and challenging technology/cyber risk frameworks, risk appetite statements and Board/ExCo metrics with senior Technology and Risk leaders and divisional stakeholders.
• Executive communication and relationship leadership with the ability to produce decision-ready papers and briefings, lead through influence in a matrixed organisation, and act as a trusted conduit between specialists and divisional risk stakeholders.
• Extensive people leadership experience with a track record building engaged teams, managing capacity and workload priorities, hiring talent, coaching and setting quality standards for Line 2 challenge and writing.

So why join us?

From the moment you join ANZ, you'll be doing meaningful work that will shape a world where people and communities thrive.

But it's not just our customers who'll feel your impact. You'll feel it too. Because at ANZ, you'll have the resources, opportunities, and support you need to take the next big step in your career.

We're a diverse bunch at ANZ in different roles, different locations, doing different things. That's why we have a range of flexible working arrangements, so our people can 'make work, work for them'. We also provide a range of benefits including access to health and wellbeing services and discounts on selected products and services from ANZ and more.

At ANZ, you'll be part of an organisation where the different backgrounds, perspectives and life experiences of our people are celebrated. That's because we're committed to building a workplace that reflects the diversity of the communities we serve. We welcome applications from everyone and encourage you to talk to us about any adjustments you may require to our recruitment process or the role itself. If you're a candidate with a disability or access requirement, and have an enquiry about the support provided, please let us know on your application or visit ANZ Accessibility and Inclusion Programs for alternate contact methods.

To find out more about working at ANZ, visit https://www.anz.com.au/careers. You can apply for this role by visiting ANZ Careers and searching for reference number 123793.

Job Posting End Date

01/10/2026, 11.59pm, (Melbourne Australia)