Risk Manager

We are excited to offer an exceptional opportunity for an experienced and strategic Risk Manager to join Downer's Governance, Risk & Compliance team within Group Technology.

This is a key leadership role suited to a professional who thrives in a complex technology environment and is passionate about strengthening technology and cyber risk management practices across a large and diverse organisation.

Reporting to the Head of Governance, Risk & Compliance, you will lead the technology risk management function across Downer, ensuring technology and cyber security risks are effectively identified, assessed, monitored, treated and reported. You will provide independent risk oversight, advisory support and governance leadership across Group Technology and Business Units, helping drive informed decision-making and improved risk outcomes.

Working closely with Cyber Security, Enterprise Risk, Group Technology leaders and key business stakeholders, you will be instrumental in embedding effective risk management practices, enhancing governance processes and providing meaningful risk insights that support Downer's strategic objectives and risk appetite.

Operating within a product-led DevOps environment, you will partner with teams across the entire technology lifecycle, supporting secure, resilient and risk-informed delivery outcomes.

This role can be based in Sydney (North Ryde), Melbourne (Collins Street), Perth (High Wycombe).

About the Role

In this role you will:

• Lead technology and cyber security risk assessments across systems, projects, suppliers, operational services, business changes and strategic initiatives.

• Maintain technology risk registers, treatment plans, risk acceptances, exceptions and governance reporting.

• Partner with Technology, Cyber Security and business stakeholders to identify, assess and manage technology risks.

• Translate technical vulnerabilities, control weaknesses and threat intelligence into clear business risk outcomes and treatment recommendations.

• Support risk governance processes including risk acceptance, exception management, escalation and reporting activities.

• Monitor remediation and risk treatment activities, ensuring actions are effectively tracked and risks are reduced in a timely manner.

• Deliver meaningful risk reporting, analytics, key risk indicators (KRIs) and emerging risk insights to technology leadership.

• Provide trusted risk advisory services to projects, operational teams, suppliers and business stakeholders.

• Drive continuous improvement of technology risk management frameworks, processes and practices.

• Lead and develop Risk Analyst capability while promoting a strong risk culture across Group Technology.

This is a highly visible leadership role where you will influence strategic decision-making while strengthening technology resilience, governance and risk maturity across the organisation.

Our Ideal Candidate

You have strong experience managing technology and cyber security risks within complex enterprise environment.

You are comfortable engaging with both technical and non-technical stakeholders, translating complex technical issues into clear business risks and practical remediation strategies. You bring strong governance capability, sound judgement and the ability to influence outcomes at all levels of the organisation.

What You Will Bring

• Bachelor's degree in cyber security, Information Technology, Computer Science, Management Information Systems or a related discipline. 

• Demonstrated experience in technology risk management, cyber security, governance, risk and compliance environments.

•  Strong understanding of risk management frameworks including NIST, ISO 27001 and ASD Essential Eight.

• Experience leading technology and cyber risk assessments, maintaining risk registers and driving remediation activities.

• Ability to translate technical vulnerabilities, threats and control gaps into business-focused risk insights.

• Strong stakeholder engagement skills with experience facilitating risk workshops and influencing decision-making.

• Experience preparing executive reporting, dashboards and governance updates.

• Leadership experience with the ability to coach, mentor and develop team members.

• Industry certifications such as CRISC, CISA, CISM, CISSP or equivalent will be highly regarded.

• ITIL Foundation or service management experience will be advantageous.

You are recognised for your ability to build trusted relationships, challenge constructively, influence outcomes and deliver pragmatic risk solutions that support both security and business objectives.

Benefits Of Working with Downer

• Work with an ASX-listed company, working with market leaders.
• Grow your career with us through personal and professional development and continuous learning: 
  • Professional development programs
  • Access to professional memberships and industry networks
• Be part of a team that cares, with support that is flexible around employee wellbeing needs: 
  • Flexible work arrangements
  • Parental leave
  • Employee Assistance Program
  • Programs promoting diversity and inclusion
• A range of corporate benefits, including: 
  • Discounted services (car hire, hotels, insurance, retail stores, gyms)

Why Downer?

As a trusted name in infrastructure, transport, facilities management, and construction, Downer is committed to delivering projects that create a lasting, positive legacy.

We're committed to building a team that reflects the diverse communities we serve, and we welcome people of all ages, genders, sexual orientations, cultures, abilities, and lived experiences. We especially encourage applications from those whose voices have traditionally been underrepresented in our industry, including women, Aboriginal and Torres Strait Islander Peoples, Māori and Pasifika Peoples, veterans, people with disability, and neurodivergent individuals.

Even if your experience doesn't align perfectly with this role, we'd still like to hear from you. If it feels like the right fit, apply — potential counts, and so do you.

As a WORK180 Endorsed Employer, we support flexibility that works for your life, inclusive leadership that values your voice, and equitable access to opportunity so you can do your best work and bring your whole self to it.