VP Head of Technology and Information Security

You will lead branch technology operations and maintain stable, secure, and resilient services. You will own technology-risk and information-security controls, coordinate regulatory compliance and remediation, oversee third-party services, support audits and governance reviews, partner with stakeholders, and coach the branch technology team.

Responsibilities

• Lead branch technology, risk management, and information security in accordance with business needs, group standards, and regulatory obligations.
• Ensure the availability, resilience, and oversight of branch technology services delivered internally and by third parties.
• Own the technology-risk and information-security framework, including risk identification, control design, monitoring, incident management, and escalation.
• Oversee regulatory compliance, audit readiness, remediation, and continuous improvement of technology controls.
• Manage third-party technology and security risk through due diligence, control assurance, and vendor oversight.
• Lead and develop the branch technology team.
• Ensure stable, secure, and resilient technology operations.
• Manage control testing, issue tracking, and remediation.
• Coordinate compliance with applicable regulatory requirements, including APRA CPS 230 and CPS 234.
• Partner with central technology teams and local stakeholders to deliver initiatives and resolve service, risk, and control issues.
• Oversee vendor performance, risk, and control assurance.
• Support audits, regulatory reviews, and governance forums through reporting and stakeholder engagement.
• Coach the branch technology team and provide operational guidance when required.

Requirements

• Have technology-leadership experience in financial services or another regulated environment.
• Have experience leading a small technology team in a hands-on, business-facing environment.
• Demonstrate experience in technology-risk management, information security, control oversight, and regulatory compliance.
• Have experience working in a matrix organization with central technology teams, business stakeholders, vendors, auditors, and regulators.
• Understand technology risk, information security, and operational resilience in a regulated environment.
• Possess working knowledge of ISO 27001, COBIT, CPS 230, and CPS 234.
• Provide effective oversight and challenge regarding technology-risk and control issues.
• Demonstrate planning, organization, problem-solving, and independent-working skills.
• Have experience in information-security management, vendor-risk assessment, and control testing.
• Demonstrate communication and stakeholder-management skills across local and geographically dispersed teams.
• Hold a bachelor's or master's degree in computer science, technology, cybersecurity, or a related field.
• CISSP, CISM, CISA, or equivalent industry certification is desirable.