Senior Manager, Digital Trust and Accreditation Program, x15ventures en x15ventures (Commonwealth Bank group)

Please note: This is a 12-month contract or a 12-month secondment for internal employees. 

Who we are 

We’re a venture-scaler powered by CommBank. That means we build, buy, and invest in startups that could benefit the bank’s 15 million customers and beyond. 

Because of what we do, we’re really neither corporate, nor startup – instead we’re happily navigating the space between both worlds. We're close enough to benefit from the bank’s strategy, scale, and stability, but separate enough that we have the autonomy to try new things. 

What it’s like to work here 

We’re a community of galvanisers, thinkers, and doers. We have a big, bold vision, which so far no-one has nailed (including us). That excites, rather than deters, us.  

We never lose sight of the impact we can have on people’s lives, and the role that each of us plays in shaping the bank of the future. We don’t take ourselves too seriously and make time to connect to celebrate and grow our people. 

At x15, we’re guided by three values: Care, courage, and commitment. And what does that mean? We’re aware, attuned, and always act to help our people and our customers. We’re more than just job titles and we don’t hide the human stuff. We lead with grit and grace and do what's right – even if it's hard. And, whatever happens, we always find a way.  

Role Overview 

This opportunity is for a dynamic and experienced leader to take ownership of the accreditation stream within x15’s digital identity initiatives. The Senior Manager, Digital Trust & Accreditation is a 1st line delivery role, accountable for achieving and maintaining scheme and regulatory accreditation across our digital identity services. 

The role is both strategic and hands-on—leading end-to-end accreditation planning and execution, embedding compliance requirements into service design and delivery, and ensuring alignment with Group risk appetite through close collaboration with 2nd Line Risk and Compliance. You’ll be responsible for overseeing the development of detailed documentation, preparing evidence for assurance assessments, and supporting the venture’s readiness for external certification and regulatory engagement. 

Key responsibilities include: 

• Own and lead the digital identity accreditation stream ensuring alignment with the Digital ID Act, Accreditation Rules, Data Standards, Privacy and AML/CTF 

• Manage end-to-end accreditation processes including readiness reviews, assessments, and certification activities 

• Develop and maintain documentation of the digital identity data environment, including system boundaries, infrastructure, data flows, and third-party involvement.  

• Collaborate with product, engineering, risk, controls and portfolio teams to embed accreditation requirements directly into product, technology and operations  

• Managing key compliance artefacts that support secure digital operations. This includes privacy and fraud assessments, breach response planning, security and accessibility evaluations, biometric and identity proofing documentation, authentication and cryptographic key management, and system design. 

• Oversee and ensure required controls are implemented, documented and traceable 

• Oversee and manage all specified technical testing requirements, including engaging with stakeholders and independent assessors to complete assurance and systems testing, ensuring traceability to system requirements, applying a risk-based methodology, and delivering validated results aligned to completion criteria. 

• Partner with x15 and Group Risk and Compliance to validate documentation against Group standards 

We’re interested in hearing from people who have: 

• Financial services or regulated industry experience required   

• Proven experience leading third party assurance and accreditation processes (e.g SOC 2, ISO 27001, PCI DSS) 

• Extensive experience leading technical assessment activities (fraud management, information security, IT service management, protective security and business resilience) 

• Expertise utilising Group Risk and Control frameworks including Control Assessment Program (CAP), Risk and Control Self-Assessment (RCSA)  

• Knowledge of interpreting regulatory requirements and standards 

• Expertise in governance from an operational risk and compliance point of view 

• Experienced in drafting and maintaining risk, controls and policy documents. 

• Experience in program delivery, project management, or regulatory change   

• Excellent communication and organisational skills  

• Strong stakeholder engagement and coordination skills   

• Risk mindset and adaptability in a fast-paced environment   

• Tertiary qualifications in business, communications, project management, or related fields.  

• Certifications in Agile, project delivery, or change management are a plus (but not required).  

Why Join Us? 

•  Enjoy a flexible and dynamic startup environment 

• We nurture a safe space for our people to show up as they are! 

• Competitive salary and bonus structure 

• Opportunities for professional growth and development 

• Access to the best in class benefits that CommBank offers. 

Research shows that people from underrepresented backgrounds sometimes hesitate to apply for roles if they don't meet every requirement. If this is you, don’t worry - we still encourage you to apply. We are committed to creating a workplace that supports long-lasting and meaningful careers for everyone, and your unique skills and perspective might be just what we’re looking for!