Risk Manager

About the Role

In this role you will:

• Lead technology and cyber security risk assessments across systems, projects, suppliers, operational services, business changes and strategic initiatives.
• Maintain technology risk registers, treatment plans, risk acceptances, exceptions and governance reporting.
• Partner with Technology, Cyber Security and business stakeholders to identify, assess and manage technology risks.
• Translate technical vulnerabilities, control weaknesses and threat intelligence into clear business risk outcomes and treatment recommendations.
• Support risk governance processes including risk acceptance, exception management, escalation and reporting activities.
• Monitor remediation and risk treatment activities, ensuring actions are effectively tracked and risks are reduced in a timely manner.
• Deliver meaningful risk reporting, analytics, key risk indicators (KRIs) and emerging risk insights to technology leadership.
• Provide trusted risk advisory services to projects, operational teams, suppliers and business stakeholders.
• Drive continuous improvement of technology risk management frameworks, processes and practices.
• Lead and develop Risk Analyst capability while promoting a strong risk culture across Group Technology.

Our Ideal Candidate

You have strong experience managing technology and cyber security risks within complex enterprise environment.

You are comfortable engaging with both technical and non-technical stakeholders, translating complex technical issues into clear business risks and practical remediation strategies. You bring strong governance capability, sound judgement and the ability to influence outcomes at all levels of the organisation.

What You Will Bring

• Bachelor's degree in cyber security, Information Technology, Computer Science, Management Information Systems or a related discipline.
• Demonstrated experience in technology risk management, cyber security, governance, risk and compliance environments.
• Strong understanding of risk management frameworks including NIST, ISO 27001 and ASD Essential Eight.
• Experience leading technology and cyber risk assessments, maintaining risk registers and driving remediation activities.
• Ability to translate technical vulnerabilities, threats and control gaps into business-focused risk insights.
• Strong stakeholder engagement skills with experience facilitating risk workshops and influencing decision-making.
• Experience preparing executive reporting, dashboards and governance updates.
• Leadership experience with the ability to coach, mentor and develop team members.
• Industry certifications such as CRISC, CISA, CISM, CISSP or equivalent will be highly regarded.
• ITIL Foundation or service management experience will be advantageous.

You are recognised for your ability to build trusted relationships, challenge constructively, influence outcomes and deliver pragmatic risk solutions that support both security and business objectives.

Benefits Of Working with Downer

• Work with an ASX-listed company, working with market leaders.
• Grow your career with us through personal and professional development and continuous learning:
  • Professional development programs
  • Access to professional memberships and industry networks
• Be part of a team that cares, with support that is flexible around employee wellbeing needs:
  • Flexible work arrangements
  • Parental leave
  • Employee Assistance Program
  • Programs promoting diversity and inclusion
• A range of corporate benefits, including:
  • Discounted services (car hire, hotels, insurance, retail stores, gyms)

Why Downer?

As a trusted name in infrastructure, transport, facilities management, and construction, Downer is committed to delivering projects that create a lasting, positive legacy.

We’re committed to building a team that reflects the diverse communities we serve, and we welcome people of all ages, genders, sexual orientations, cultures, abilities, and lived experiences. We especially encourage applications from those whose voices have traditionally been underrepresented in our industry, including women, Aboriginal and Torres Strait Islander Peoples, Māori and Pasifika Peoples, veterans, people with disability, and neurodivergent individuals.

Even if your experience doesn’t align perfectly with this role, we’d still like to hear from you. If it feels like the right fit, apply — potential counts, and so do you.

As a WORK180 Endorsed Employer, we support flexibility that works for your life, inclusive leadership that values your voice, and equitable access to opportunity so you can do your best work and bring your whole self to it.