About the Role
The Technology and Operations Risk team provides specialist Line 2 Operational Risk and Compliance advice, assurance, challenge and oversight across Technology and COO. As Senior Manager Technology Risk, you will provide pragmatic Line 2 risk advice, assurance and oversight across the Business CIO areas.
Responsibilities
- Provide specialist Line 2 Technology Risk advice and oversight to teams Business CIO areas.
- Support risk assessment, assurance, challenge and acceptance activities across technology risks, controls, issues, incidents, change initiatives and risk profiles.
- Monitor and assess material technology risk themes, including risks relating to cyber, cloud, data, AI, operational resilience, software engineering and technology change.
- Help stakeholders understand risk implications, control gaps, practical risk insights and where focused action is required.
- Support clear and timely identification, escalation and reporting of material technology risk and compliance matters to senior stakeholders and relevant Non-Financial Risk Committees.
- Provide input to relevant Group risk frameworks, policies and procedures where required.
- Build effective relationships across technology, business and risk stakeholders.
- Provide clear, practical and commercially aware risk advice that supports better decision making.
- Work collaboratively as part of a cross-skilled team supporting interconnected technology and operational risk domains.
- Contribute ideas to improve and innovate Line 2 Risk Management assurance, analytics, AI, reporting and operational activities.
- Support a team culture focused on learning, constructive challenge, inclusion and continuous improvement.
- Role model behaviours aligned to CBA values, leadership expectations and a safe workplace.
Requirements
- Experience in Technology Risk, Operational Risk, Technology Assurance, Cyber Risk, Technology Audit, Software Engineering or a related field.
- An understanding of CBA's operational risk management framework, control environments and the three lines of defence model.
- Strong technical knowledge in one or more domains: tech and cyber controls, cloud, AI, software engineering, data engineering, analytics, technology resilience.
- The ability to work through ambiguity, assess complex technology risks and connect risk issues to business outcomes.
- Excellent communication and influencing skills, including the ability to engage stakeholders and explain risk matters clearly.
- A pragmatic, curious and continuous improvement-focused mindset.
- The ability to prioritise effort based on materiality, risk appetite and business impact.
- Confidence working in an agile and collaborative environment where early engagement, clear judgement and timely delivery matter.
Skills
- Technology Risk
- Operational Risk
- Technology Assurance
- Cyber Risk
- Technology Audit
- Software Engineering
- Tech and cyber controls
- Cloud
- AI
- Data engineering
- Analytics
- Technology resilience
- Communication
- Influencing
- Stakeholder engagement
Location
- Remote
Work Type
- Full-time
Experience Level
- Senior
About the Company
- Risk Management is an independent function within CommBank that is accountable for providing advice, oversight, assurance and acceptance of key decisions to help the Group operate within its risk appetite.
