Senior Manager Technology Risk presso Commonwealth Bank of Australia

See yourself in our team: 

Risk Management is an independent function within CommBank which is accountable for providing approval and acceptance of decisions to ensure the Group remains within its risk appetite. 

 The Technology and Operations (Tech & Ops) Risk team is responsible for providing specialist Operational Risk and Compliance (OR&C) advice, assurance and acceptance/approval of decisions made across the Technology, COO and Supplier Support Units. 

 Do work that matters: 

Join our team of technology risk experts as a Senior Manager responsible for driving the delivery of Operational Risk & Compliance Support across Technology and Cybersecurity. This is an awesome opportunity to lead with impact by working with skilled technologists in shaping how we manage technology risk in a rapidly changing environment. You will help build resilience, safeguard innovation, and ensure our digital foundations are strong, secure, and trusted—by embedding effective controls that proactively manage risk and help to cultivate a robust risk management culture. 

Key responsibilities for this role includes: 

Technical 

• Partnering with crews aligned in the Chief Technology Office, covering Global Technology Services (ie. Networks, Backups, Global Hosting Services, Mainframe, Data centres) domains to provide SME risk-based challenge and guidance on technology design, architecture and operational resilience, ensuring risks are identified, assessed and effectively managed. 

• Lead and execute assurance reviews to evaluate the effectiveness of technology controls and risk mitigations across infrastructure and emerging technologies. 

• Oversee and monitor critical technology risks and controls, including issue and incident management, change-related risks and risk acceptances.  

• Contribute to non-financial risk committees (NFRCs), attestations, incident reporting, implementation of changes to the risk framework, and other responsibilities aligned with CBA’s internal policies, governance standards, and the Group’s Risk Management Approach and Frameworks. 

• Drive continuous improvement in assurance practices, embedding lessons learnt and industry best practices into risk management processes. 

Leadership 

• Work as part of a cross-skilled team that can support a range of inter-connected risk domains; speaking up and contributing to appropriate Line 2 oversight and challenge. 

• Provide ideas for Line 2 risk management and assurance activities, data analytics and stakeholder reporting; contribute to a culture of learning and collaboration. 

• Role model behaviours that are consistent with CBA values expectations and leadership principles; provide a safe workplace for all team members, customers and visitors. 

• Develop and maintain partnerships with stakeholders; become a trusted advisor using commercial acumen, practical recommendations; and assist the business to understand where prioritised focus on key risks and compliance matters is required. 

We’re interested in hearing from people who have: 

• Foundational to intermediate technical expertise of technology, coupled with a strong risk-oriented mindset and the ability to think critically assess and manage technology risk. 

• Solid experience in risk management, with hands-on experience across the Three Lines of Defence. 

• Strong written and verbal communication skills report writing, evidence gathering and data analysis capabilities. 

• Stakeholder and influencing skills with the ability to proactively engage Line 1 teams and engender trust with pragmatic, commercially balanced risk advice. 

• Qualification/industry accreditation in technology and technology risk (e.g. degree in IT/Computer Science, CISA, CRISC, CISSP, CISM, AWS certifications)  

• A curious and humble mindset, understanding of external trends and changes, interest in continuous learning, to build risk management best practice. 

If this sounds like the role for you then we would love to hear from you. Apply today! 

We support our people with the flexibility to balance where work is done with at least half their time each month connecting in office. We also have many other flexible working options available including changing start and finish times, part-time arrangements and job share to name a few. Talk to us about how these arrangements might work in the role you’re interested in.