Manager, Third Party Technology & Cyber Risk

TAL • Sydney Region • 19h ago

Job Description The Manager is part of the Third-Party Tech & Cyber Risk team within the Technology & Cyber Risk function in the Technology Business Unit. The role leads partner-facing technology and information security assurance activities, including coordinating responses to business partner requests, maintaining partner assurance artefacts, and supporting periodic assurance and reporting. The role also supports delivery of TAL’s third-party technology risk and cyber security management approach, including embedding relevant technology and cyber contractual clauses and governance expectations. This role is accountable for maintaining and continuously improving relevant frameworks, policies, practices and controls to ensure TAL’s risk posture remains within appetite. In this role you will: Engage and coordinate across Technology, Risk, Legal, Procurement and Partnerships to provide consistent information on TAL’s control posture and risk management approach. Support response to technology and information security assurance queries from business partners ensuring responses are timely, accurate, and aligned to TAL’s internal technology & cyber control environment. Review and interpret independent assurance artefacts (e.g., SOC reports, ISO certifications) and translate outcomes into clear positions and control summaries. Produce concise reporting for Technology leadership / ELT on partner assurance demand, key themes and emerging risks, partner-impacting issues, and remediation progress, including escalations where commitments may be at risk. Plan and execute targeted internal control deep dives (design and operating effectiveness) over selected technology/cyber controls to validate partner commitments and strengthen confidence in assurance responses. Assist with the uplift and maintenance of partner-facing technology and cyber clauses to align with TAL’s regulatory obligations and evolving threat environment, in collaboration with Legal, Risk and Technology stakeholders.