Manager - Financial Services Technology Risk

About the role

EY is looking for a Manager for its Technology Risk practice within Financial Services, based in the Warringah office in Sydney. The role is central to growing the Technology Risk business, strengthening its market presence and delivering high-quality engagements that shape the trust and resilience agenda for Australia's leading financial institutions. It combines commercial instincts with deep technology risk expertise, and the position is supported by a strong team, committed Partners and national leadership. The role is based in the Warringah office and may be adjusted to work flexibly with reduced hours.

Key responsibilities

• Lead and oversee technology risk and assurance engagements for audit and non-audit clients, ensuring high-quality outcomes.
• Oversee independent assessments, including regulatory compliance reviews and maturity assessments aligned to industry frameworks.
• Lead technology and cyber control assurance services such as GS007, ASAE 3150, SOC 1 and SOC 2 engagements.
• Advise clients on complex regulatory agendas, particularly APRA requirements including CPS 234 and CPS 230.
• Guide clients on managing risks associated with third-party service providers.
• Build and grow client relationships, identify market opportunities and help expand the practice locally and nationally.
• Coach, mentor and uplift team members, fostering a collaborative, inclusive and high-performing culture.
• Contribute to the practice's future through innovation, thought leadership and continuous improvement.
• Lead external audits of technology environments, including IT general controls and automated controls, while keeping ahead of emerging risks such as cyber threats, AI and cloud technologies.

Required profile

• 6+ years of experience in Technology Risk, Cyber assurance, Operational resilience, Technology audit, with a proven track record in assessing complex IT environments.
• Relevant qualifications such as CISA, CISSP or equivalent.
• Bachelor's degree in a relevant field.

Required skills

• In-depth knowledge of IT regulations, risk management frameworks and technology audit methodology.
• Knowledge of APRA requirements (CPS 234, CPS 230).

What we offer

• Career development with future-focused skills and world-class experiences.
• Flexible work arrangements.
• A benefits package including a yearly wellness incentive, an extra 8 weeks of flex leave per year, and family-friendly policies including up to 26 weeks of gender-neutral paid parental leave.