Technology Risk Manager

About Mason Stevens

Mason Stevens is a leading provider of integrated wealth platform technology, that uniquely focuses on investor portfolio outcomes. More than just an administration platform, the innovative technology, paired with experienced investment specialist support, empowers advisers to deliver on their clients’ investment objectives via an unconstrained investment universe, and backed by exceptional client service.

Established in 2010, Mason Stevens is privately owned with over $10 billion of funds under administration and management. Led by some of Australia’s most experienced finance, technology, and investment professionals, with over 80 staff nationally.

About the role

As the Technology Risk Manager, you will manage and administer Mason Stevens’ cybersecurity strategy and IT/Technology Risk framework. You will develop and oversee the implementation of effective controls and strategies to mitigate and minimise cybers events/incidents and technology risks. In addition, you will take carriage of Technology Risk initiatives (policy and control documentation, external vendor management/risk assessments, BCP and DR test program management, penetration test program management etc).

You will provide technology risk management expertise, advice, and oversight across technology and information security risks, and have the ability to build strong mutually beneficial relationships at all levels across the organisation and externally, including with key third party suppliers.

Key Responsibilities:

• In conjunction with the Head of Technology, you will contribute to the planning, development, and execution of the organisation’s IT Risk practice, ensuring alignment to the organisation’s overall strategic objectives and risk appetite.
• Lead the Cyber Uplift Program including the delivery of a comprehensive Mason Stevens Cybersecurity Management Plan (CMP) to plan, prioritise and deliver control improvements, documentation and operational guidelines relating to managing Mason Stevens enterprise risk rating
• Provide Line 1 & Line 2 risk management of Cyber and Technology risks, and actively manage, escalate, control and monitor risks in accordance with the risk management framework and ensure appropriate reporting and escalation.
• Maintain and oversee the IT Control Testing program and coordinate activities such as vendor assessments/audits, penetration testing, simulated incidents and risk assessments.
• In conjunction with the Compliance and Risk teams, administer and oversee the IT Issues Management framework.
• Manage third party governance for Technology Risk.
• Review, plan and execute Business Continuity Plan (BCP) and Disaster Recovery (DR) policy publishing and testing.

Required Skills and Expertise:

• SME knowledge of cyber security & risk management practices.
• Project and change management capability.
• Capacity to positively influence organisation culture.
• Strong verbal and written communication skills.
• Strong critical thinking skills.
• The ability to develop strong and beneficial networks internally and externally.
• The ability to prioritise and manage multiple tasks and work to deadlines.

Required Experience:

• Demonstrated experience in the planning, development, and successful execution of strategy.
• Sound technical IT background and in-depth knowledge of risk management and regulations including APRA CPS 234 and CPS 230 requirements.
• Demonstrated pragmatic approach to risk management.
• Strong organisational and project management skills with the demonstrated ability to prioritise and manage competing tasks, meet deadlines, and achieve results in a dynamic environment.
• Proven creative problem solving and the ability to work with strategic concepts.
• Ability to build strong relationships with stakeholders whilst negotiating appropriate risk acceptable frameworks and structures.
• Previous experience in the financial services industry (desirable).

Qualifications:

• Relevant qualifications in a related Information Technology field (such as Cyber Security, Computer Science or Network Security) or a related discipline (preferred).
• ITIL (Information Technology Infrastructure Library) qualifications (desirable).
• CISSP (Certified Information Security Professional) or equivalent certification (desirable).

Life at Mason Stevens

At Mason Stevens, relationships matter to us, and by leaving our egos at the door, we can realise remarkable outcomes whilst supporting each individual to realise their potential.

We are committed to building and maintaining a diverse and talented team, backed by the belief that it is only by working together, that we will achieve our purpose; helping our Clients to realise better tomorrows.

We believe in keeping our ‘minds wide open’ and empowering people with the resources and trust needed to make a meaningful difference. We know an idea can only change lives if it happens, and value the kind of people who believe in being the change they seek and see opportunity in challenge.

Above all, we know you will be a great fit for us if you value people, show kindness and play fair.

Kindly note that Australian full work rights are required for this application.