Manager - Risk & Assurance - IT

Description:

The opening is with a leading technology-only provider to the global funds and wealth industries. They are the network of financial networks, enabling firms to do business with the largest range of counterparties and asset classes possible. More than 4.4 trillion in assets are held in accounts entrusted to the organization while they process 1 trillion of investment value each month. The organization is headquartered in Australia with offices across New Zealand, United Kingdom, Europe, Africa, India and Asia. It is also listed on the ASX.

Note - This position provides parental leave coverage within the company and it will be a 6/12 month parental leave cover offrole position.

Job Role

Internal Review & Assurance

• Deliver and maintain annual Internal Audit & Review Plan, ensuring timely completion of planned reviews.
• Conduct risk-based internal audits across operational, compliance, and information security domains.
• Document and report findings, root causes, and agreed management actions.
• Track and monitor the closure of audit findings to ensure effective remediation.
• Support external and certification audits by maintaining evidence, action tracking, and audit readiness documentation.
• Maintain the internal review and audit charter, calendar, and documentation on SharePoint/Confluence.

Information Security Assurance

• Support internal ISO27001 audits and liaise with the Information Security team to validate control effectiveness.
• Prepare and review audit materials for client assurance and due diligence requests (e.g., RFPs, SOC2 mapping, ISO27001 evidence).
• Ensure control gaps, non-conformities, and opportunities for improvement are documented and addressed.
• Contribute to audit and risk dashboards presented to the GRC Head, CFO, Group Risk Council and Audit & Risk Committee.

Risk Management

• Support the facilitation of Risk and Control Self-Assessment (RCSA) workshops and documentation of business risks.
• Provide oversight of control testing, monitoring, and risk mitigation actions.
• Escalate significant risk issues in a timely and transparent manner.
• Assist in the preparation of quarterly risk and assurance reports for Group Risk Council.

Business Continuity & Compliance

• Ensure assurance activities align with Bravuras Business Continuity, Risk, and Compliance frameworks.
• Maintain readiness for ISO22301 (Business Continuity), ISO45001 (Safety), and ISO14001 (Environmental) audits.
• Support coordination of business continuity testing and internal review outcomes with relevant stakeholders.

Stakeholder & Team Collaboration

• Partner with stakeholders across Finance, Technology, Legal, Operations, and regional GRC representatives to maintain oversight of key controls.
• Collaborate with the GRC team in Sydney, Gurgaon, and other regions to ensure consistency of reporting and approach.
• Provide mentoring and guidance to senior analysts supporting the internal audit and assurance program.
• Expectation of at least 2 days per week with adjusted working hours to support EMEA stakeholders.

Qualifications & Experience

• Minimum 8-10 years experience in Risk Management, Internal Audit, or Information Security Assurance.
• Demonstrated experience conducting internal audits in accordance with ISO standards or IIA methodology.
• Familiarity with ISO27001, ISO22301, ISO45001, and ISO14001 standards.
• Experience supporting certification audits and managing corrective action tracking.
• Background in financial services, technology, or SaaS preferred.
• Relevant tertiary qualifications and/or certifications such as CIA, CISA, CRISC, ISO Lead Auditor or equivalent desirable.

Skills & Attributes

• Strong analytical, investigative, and documentation skills.
• Excellent communication and stakeholder management abilities.
• High attention to detail with strong accountability and follow-through.
• Ability to manage competing priorities in a fast-paced, global environment.
• Collaborative, proactive, and adaptable to change.
• Demonstrates values and commitment to integrity and client trust.