Risk Business Partner

About the role

Iress, a technology company serving financial services, is looking for a Risk Business Partner to join its Group Risk team, based in Sydney (preferred) or Melbourne. Reporting to the Head of Risk Business Partners, you will act as a trusted adviser to a business unit's leadership team, helping them make informed strategic and operational decisions within Iress' risk appetite. You will lead the risk agenda for the business unit, provide clear risk insights and oversee its risk profile end to end.

Key responsibilities

• Advise the business unit's leadership team and act as the primary risk subject matter expert.
• Identify, assess and manage business unit risks, maintain the risk profile in the GRC system and apply the Group Risk Appetite Statement through relevant measures and metrics.
• Provide timely, decision-useful risk reporting, insights and analysis to business leaders and governance forums.
• Support control owners to design, test and review controls through Control Self Assessment activities.
• Embed incident and breach management requirements, escalate incidents and breaches, and support issue owners with remediation.
• Communicate emerging and strategic risks, support compliance with regulatory obligations and monitor audit actions through to closure.
• Lead the risk aspects of strategic initiatives and transformation, including business continuity and resilience, AI and data governance, information security and cyber risk management.
• Contribute to improving the Risk Management Framework, governance, policies, methodologies, tools and GRC capabilities.

Required profile

• Extensive experience partnering with senior business leaders in a business-aligned risk role, ideally in software, fintech or technology, or in professional services advisory.
• Experience embedding risk frameworks, policies and monitoring processes within a business.
• Ability to build trusted relationships with executive and senior leaders and communicate the overall risk health of a business.
• Experience in a global, matrix structure is an advantage; relevant certifications such as CISA, CRISC, CISM or CISSP are a plus.

Required skills

• Strong technical knowledge of IT risk frameworks and terminology.
• Excellent written and verbal communication, including risk reports for Board- and Executive-level audiences.
• Collaboration, influencing, stakeholder engagement and project management skills.

What we offer

• Hybrid working.
• 8 additional paid days per year and up to 26 weeks' paid parental leave for primary carers.
• Starting school leave of 8.5 days and a cash bonus for successful referrals.
• 3 days' paid leave per year for charity initiatives, discounted health insurance and access to LinkedIn Learning.