FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in Line 2 risk management, technology risk, and cyber risk, with a strong ability to assess control effectiveness and provide actionable recommendations. Proficient in synthesizing complex risk information into executive-level insights and reports for senior stakeholders.
Highest-signal resume keywords
Line 2 Risk ManagementTechnology Risk AssessmentCyber Risk OversightNIST Cybersecurity FrameworkCRISC Certification
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Risk AssessmentControl Design AssessmentIncident ManagementData ProtectionVulnerability ManagementSecurity MonitoringChange ManagementThird-Party Risk ManagementRisk Appetite MetricsRoot Cause Analysis
Soft Skills
Influencing Senior StakeholdersConstructive ChallengeWritten CommunicationVerbal CommunicationSynthesis of Information
Tools & Technologies
GRC PlatformsRisk Data Dashboards
Certifications & Qualifications
CRISCCISMCISSP
Industry Keywords
Risk Management FrameworksThree Lines of AccountabilityCybersecurity ComplianceBusiness ContinuityAI Risk Management
Tech Stack
Tools & technologiesCyber Security
About the role
Key responsibilities & impact- Partner with Technology and Cyber leaders as a trusted Line 2 risk adviser
- Provide practical support, independent oversight and constructive challenge on risk profiles, control environments and risk management practices
- Support first-line teams to identify, assess, monitor and manage technology, cyber, data and AI-related risks
- Conduct risk assessments, control reviews, deep dives, root cause analysis and reviews of issues, incidents, assurance outcomes, risk appetite metrics and guardrails
- Assess the design and operating effectiveness of technology, cyber and data controls
- Identify control gaps and provide pragmatic recommendations
- Review risk and control implications for new or materially changed technology, products, services and third-party arrangements
- Provide Line 2 oversight of technology and cyber policies, frameworks, standards and procedures
- Partner with specialists on data security, AI and GenAI, business continuity, incident and cyber crisis readiness, regulatory compliance and third-party risk
- Support incident and post-incident reviews
- Coordinate Enterprise Risk priorities and track delivery across the Technology and Cyber portfolio
- Prepare decision-focused insights and executive-level reporting for senior stakeholders and governance forums
Requirements
What you’ll need- Strong experience in Line 2 risk, technology risk, cyber risk, internal audit, business partnering, enterprise risk transformation or risk programme delivery in a complex, multi-stakeholder environment
- Practical understanding of technology controls covering identity and access management, change management, IT operations, vulnerability management, security monitoring, data protection, resilience and third-party technology services
- Deep understanding of risk management frameworks and practices, including risk assessment, controls, issues, incidents, assurance and risk appetite
- Experience operating within the Three Lines of Accountability
- Ability to assess control design and operating effectiveness, identify risk themes and translate technical findings into actionable recommendations
- Ability to influence and constructively challenge senior stakeholders
- Strong written and verbal communication skills
- Ability to synthesise risk, controls and assurance information into executive-level reporting
- Experience partnering with Technology, Cyber, Data or digital functions
- Knowledge of NIST Cybersecurity Framework, COBIT and ISO/IEC 27001
- Experience with data security, AI or GenAI risk, cyber incident or crisis management, third-party risk and technology-related regulatory or compliance requirements
- Experience supporting senior management or Board-level governance
- Experience working with GRC platforms, risk data or dashboards
- Experience in a professional services or partnership environment
- Relevant certifications such as CRISC, CISM or CISSP are highly desirable
- No work visa sponsorship available
Benefits
Comp & perks- Flexibility to choose when, where, and how you work
- Continuous learning and leadership development
- Career progression opportunities
- Generous leave entitlements, including floating public holidays and birthday leave
- Ability to purchase additional leave on top of four weeks
- Up to 26 weeks of parental leave for caregivers
- Inclusive environment committed to Inclusion and Diversity and First Nations Prosperity