Airwallex - Senior Manager, Technology Risk Assurance

• Essentials • 8+ years of progressive experience in technology risk, IT audit, information security assurance, or technology compliance, including proven experience in a Second Line of Defence risk assurance capacity. • Big Four background. • Experience building and testing risk controls. • A track record of recruiting, mentoring, and leading high-performing technical risk or assurance teams. • Deep practical expertise in ITGCs, IT application controls, automated business controls, and SOX compliance within complex distributed architectures. • Hands-on experience assessing cloud risks across AWS or GCP, particularly IAM, privileged access and segregation of duties, Firefighter workflows, CI/CD pipelines, database controls, and modern API security. • Practical ability to write and use SQL, Python, or API scripts to query databases, automate evidence extraction, and reduce manual sampling. • Strong conceptual and practical understanding of risks and controls around AI/ML systems, LLMs, and automated decision engines, including data drift, access guardrails, and model integrity. • Proven ability to constructively challenge First Line engineering leads while maintaining the credibility to defend automated testing methodologies to external auditors and regulatory examiners. • Solid working knowledge of industry control frameworks such as SOC 1/2, ISO 27001, and NIST CSF. • Preferred • Direct experience building or deploying AI agents, LLM-driven audit assistants, or automated compliance and testing pipelines. • Fintech experience, particularly within a high-growth fintech, payments platform, digital bank, or cloud-native technology company. • Familiarity with international financial technology regulations and expectations, including MAS TRM, FCA, HKMA, DORA, ASIC, and FinCEN. • Experience integrating GRC platforms, BI dashboards such as Tableau or Looker, and continuous compliance monitoring tools. • Relevant certifications such as CISA, CISSP, CRISC, CISM, or AWS/GCP certifications. • You'll thrive here if • You’re comfortable owning the roadmap yourself. • You own the outcome and you don't wait for permission to fix what's broken. • You're comfortable with ambiguity. Give you a problem, not a prescription, and you'll run with it. • You say what you mean. You're direct, but you lead with respect. • You simplify complexity rather than hiding behind it.