Manager - Technology Resilience, Oceania Data Office

About the role

EY Oceania is building an ongoing capability to strengthen how technology assets are owned, secured and maintained across the region, covering AI-driven cyber and vulnerability risk and enterprise asset management. As Technology Risk and Resilience Manager, you will lead its day-to-day execution in a hands-on role, working directly with asset owners across the Service Lines to drive accountability and progress vulnerability and end-of-life remediation. The role reports to the Oceania Data Lead within the Office of the Chief Technology and Information Officer (CTIO), can be based at any EY office across Australia and may be adjusted for flexible or reduced hours.

Key responsibilities

• Drive remediation of technology asset risk across the Oceania estate, working asset by asset with Product and Technical Owners to close vulnerabilities, replace end-of-life components and retire obsolete systems.
• Confirm accountable ownership by ensuring every asset has a named Product and Technical Owner and keeping that record current.
• Prioritise and sequence remediation with information security and technology teams, ranking vulnerabilities by severity, exposure and age and coordinating change and patching windows.
• Deliver phased, owner-approved remediation, sequencing end-of-life and internet-facing infrastructure work so live client platforms stay available.
• Own the Asset and Risk Control Tower as a working tool, keeping the regional view of asset, vulnerability and certification data accurate and improving data quality and surfacing shadow assets.
• Turn AI-driven threat intelligence into concrete remediation across the estate.

Required profile

• Experience in technology risk, cyber security, infrastructure or application remediation, vulnerability management or technology delivery in a complex enterprise environment.
• Strong stakeholder skills across technology, risk, business and leadership audiences, with the ability to influence people who do not report to you.
• Sound judgement on when to solve, escalate or formally accept residual risk, and comfort working to a remediation schedule dependent on teams outside your reporting line.

Required skills

• Ideal candidates: experience running a remediation or resilience program across a distributed estate with federated ownership.
• Ideal candidates: familiarity with enterprise asset management or configuration management platforms and their data quality challenges.
• Ideal candidates: exposure to Responsible AI, data classification, privacy or regulatory obligations relating to technology resilience.
• Ideal candidates: certifications such as CRISC, CISM or CISSP, or a degree in a technology, cyber security or engineering discipline.

What we offer

• Career development with future-focused skills and world-class experiences.
• Flexible work arrangements.
• A benefits package including a yearly wellness incentive, an extra 8 weeks of flex leave per year, and family-friendly policies including up to 26 weeks of gender-neutral paid parental leave.
• A competitive salary open to negotiation depending on skills and experience.