THE TEAM

The Operational Risk Team operates within the Chief Risk Office and reports to the Chief Risk Officer. The Chief Risk Office is responsible for maintaining and operationalising APRA’s risk management, compliance, and resilience frameworks, providing a holistic view of APRA’s risk profile, driving actions to mitigate risks, and embedding of the desired risk behaviours and culture.

THE ROLE

The Senior Analyst is responsible for supporting APRA’s Divisions to effectively manage technology and data risks and embed the desired risk culture by operationalising APRA’s risk management, compliance, and resilience frameworks.
The role is responsible for contributing to elevating APRA’s technology and data risk awareness, promoting good risk management practices and governance, enabling organizational continuity, and establishing mechanisms that enable Management to achieve compliance with mandatory obligations.

KEY RESPONSIBILITIES

• Contribute to the improvement and operationalisation of APRA’s risk management, compliance, fraud, and business continuity policies and frameworks;
• Lead enterprise-wide risk assessments focused on technology assets, infrastructure, applications, platforms, and data management practices;
• Identify technology and data risks arising from new projects, system changes, third-party engagements, cloud adoption, and emerging digital trends (e.g., AI, machine learning, automation);
• Evaluate adequacy of existing controls to mitigate technology and data risks, proposing enhancements where necessary;
• Engage broadly across APRA to establish an up to date and accurate view of key risks and the effectiveness of mitigating actions;
• Support actions that embed (and continuously evolve) APRA’s risk culture;
• Communicate the teams’ purpose and function under APRA’s strategy;
• Contribute to an open culture within the business unit, where divergent views are shared and respected; and
• Awareness of APRA’s organisational dynamics and use this effectively in managing internal relationships and engaging stakeholders.