Risk Management Specialist
Team: Technology | Reports to: Manager, Technology Risk, Governance & Assurance
About the Role
Support the identification, assessment, and management of technology risks. This role helps improve risk practices, supports informed decision-making, and strengthens overall risk maturity.
Key Responsibilities
Safety & Values
- Follow safety policies and procedures
- Maintain personal wellbeing and support others
- Act in line with organisational values
Technology Risk Management
- Support and improve the technology risk program
- Work with stakeholders to identify and assess risks and opportunities
- Provide guidance on risk management practices
- Assist in developing risk frameworks, tools, and processes
- Support risk training and awareness initiatives
- Ensure alignment with organisational risk standards
Risk Controls & Monitoring
- Assist with risk reviews and assessments
- Identify and evaluate key controls
- Maintain the Technology Risk Register and risk profile
- Track and follow up on risk actions
- Monitor effectiveness of controls and mitigation activities
Risk Response & Improvement
- Track completion of risk treatments
- Support risk workshops and reviews
- Ensure risk processes are consistently applied
- Assist with improvements from audits and incidents
Communication & Reporting
- Work with teams to ensure risks are identified and managed
- Report on key risks, trends, and emerging issues
- Prepare risk reports and key risk indicators
- Share insights and best practices
Compliance & Assurance
- Support compliance with relevant regulations and frameworks
- Assist with audit preparation and evidence collection
- Coordinate with teams on audits, improvements, and vendor risk
- Ensure risks in projects are effectively managed
Skills & Experience
Essential:
- Degree in business, governance, audit, compliance, or similar (or equivalent experience)
- Experience in risk management (assessments, controls, reporting)
- Understanding of governance and risk frameworks
- Strong communication and stakeholder engagement skills
Desirable:
- Experience in regulated environments or audits
- Knowledge of technology risk and resilience
- Influencing and negotiation skills
Key Relationships
- Technology leadership and teams
- Risk and governance teams
- External stakeholders and providers