Risk Manager – Security, Cloud and Architecture Risk

About the role

ANZ is looking for a seasoned cyber‑risk professional to lead its Security, Cloud and Architecture Risk function. In this Line 2 position you will provide independent oversight of technology risk, shaping the bank’s approach to security, cloud and architectural resilience.

Key responsibilities

• Deliver high‑quality independent Line 2 oversight, review and challenge across security, cloud and architecture risk domains.
• Form credible risk opinions on control design, effectiveness, remediation progress and residual risk.
• Build trusted relationships with senior Cyber Security, Technology and Risk stakeholders, offering pragmatic advice and constructive challenge.
• Support governance, assurance, audit and regulatory engagement with evidence‑based positions on key risk matters.
• Focus on identity and access, vulnerability management, cloud security, third‑party risk and cyber‑incident preparedness.

Required profile

• Extensive experience in technology and cyber‑risk management, preferably within a large financial institution.
• Strong judgement and the ability to provide independent, senior‑level risk insight.
• Excellent stakeholder management skills with senior Group Technology, Cyber Security and Risk leaders.
• Demonstrated ability to influence risk‑based decisions and support resilient operations.

Required skills

• Knowledge of identity and access management concepts.
• Understanding of vulnerability management processes.
• Experience with cloud security principles.
• Familiarity with third‑party risk assessment.
• Capability to contribute to cyber‑incident preparedness planning.