IT Risk & Compliance Manager

SS&C is a leading provider of mission-critical, AI-powered technology and services empowering financial services and healthcare organizations to work smarter, faster, and securely. Founded in 1986, SS&C is headquartered in Windsor, Connecticut, and has offices worldwide. More than 23,000 financial services and healthcare organizations, from the world's largest companies to small and mid-market firms, rely on SS&C for expertise, scale, and technology.

Job Description

Title: IT Risk & Compliance Manager

Location: Australia [Preferably Melbourne / Sydney]

Type: Full Time || Hybrid

Job Description

Get To Know Us:

SS&C is a leading provider of mission-critical, AI-powered technology and services empowering financial services and healthcare organizations to work smarter, faster, and securely. Founded in 1986, SS&C is headquartered in Windsor, Connecticut, and has offices worldwide. More than 23,000 financial services and healthcare organizations, from the world's largest companies to small and mid-market firms, rely on SS&C for expertise, scale, and technology.

SS&C GIDS provides information processing and computer software services and products. The Company’s operating segments include financial markets, customer management, professional services, and output solutions. SS&C GIDS serves the alternative investments, asset and wealth management, banking and lending, insurance, and real estate industries.

Why You Will Love It Here!

• Flexibility: Hybrid Work Model
• Your Future: Income Protection Insurance & Salary Continuance
• Work/Life Balance: Generous Bereavement & Compassionate leave
• Your Wellbeing: Private Health Insurance discount, Primary & Secondary Paid Parental leave, Death & TPD Insurance
• Diversity & Inclusion: Committed to Welcoming, Celebrating and Thriving on Diversity
• Training: Hands-On, Team-Customized, including SS&C University
• Extra Perks: Discounts on fitness clubs, travel and more!

What You Will Get To Do:

The IT Risk & Compliance Manager establishes, maintains, and uplifts the organisation’s IT Risk control framework. This position drives alignment with regulatory standards and mitigates technology risks. The role leads IT audit activities, oversees disaster recovery and business continuity programs, and manages key risk reporting metrics.

• Support the design, implementation, and continuous improvement of the Risk Management Framework and Strategy aligned to industry best practice
• Maintain and uplift technology and operational control frameworks, including control assurance testing
• Embed risk and controls into IT systems, platforms, and change initiatives
• Ensure alignment with three lines of defense model
• Identify, assess, and monitor IT and cyber risks, including system access, data security, and third-party risks
• Support compliance with regulatory requirements for Information technology and superannuation businesses, including CPS 230, CPS 234, ASAE 3402, and ISO certifications
• Contribute to IT risk assessments, system assurance activities, and technology change risk reviews
• Support internal and external audits, including coordination of audit responses, tracking remediation actions and ensure closure of findings
• Support the design, testing, and maintenance of Business Continuity Plans (BCP) and Disaster Recovery (DR) frameworks
• Conduct risk assessments and continuous control monitoring on critical third-party IT vendors
• Develop and maintain Key Risk Indicators (KRIs) across IT and operational risk domains
• Deliver clear, data-driven risk reporting to senior management and clients
• Provide insights into emerging risks, control weaknesses, and trend analysis

What You Will Bring:

• Tertiary qualification in Information Technology, Cyber Security, Commerce (Risk Management), or a related discipline.
• 5+ years of dedicated experience in IT Audit, IT Risk Management, or IT Compliance within the Australian market
• Prior experience working in financial services, insurance, superannuation, or highly regulated corporate environments is required.
• Deep operational understanding of ASAE 3402 frameworks, ISO 27001 standards, APRA CPS 230 requirements, and audit processes.
• Proven track record implementing or auditing BCP/DR strategies under Australian regulatory guidelines.
• Proven ability to design and assess controls across business and technology environments
• Experience with risk systems, KRI development, and reporting frameworks
• Strong analytical, documentation, and stakeholder engagement skills
• Ability to operate in a complex, regulated, and technology-driven environment
• Excellent verbal communication skills and active listening skills.
• Strong problem solving and identifying root cause to address challenges effectively.
• Must be a team player and able to work collaboratively and flexibly with and through others.
• Proven experience in managing and influencing stakeholders at all levels.
• Ability to think strategically and deliver simultaneous programs.

We encourage applications from people of all backgrounds to enable us to bring diverse perspectives to our thinking and conversation. It's important to us that we strive to have a workforce that is diverse in the widest sense.

Thank you for your interest in SS&C! If applicable, to further explore this opportunity, please apply directly with us through our Careers page on our corporate website @ ************************************* explicitly requested or approached by SS&C Technologies, Inc. or any of its affiliated companies, the company will not accept unsolicited resumes from headhunters, recruitment agencies, or fee-based recruitment services.

Applications will be accepted on an ongoing basis until the position is filled.

SS&C Technologies is an Equal Employment Opportunity employer and does not discriminate against any applicant for employment or employee on the basis of race, color, religious creed, gender, age, marital status, sexual orientation, national origin, disability, veteran status or any other classification protected by applicable discrimination laws.