Manager CTO Risk

See yourself in our team:

Risk Management is an independent function within CommBank which is accountable for providing approval and acceptance of decisions to ensure the Group remains within its risk appetite.

The Technology and Operations (Tech & Ops) Risk team is responsible for providing specialist Operational Risk and Compliance (OR&C) advice, assurance and acceptance/approval of decisions made across the Technology, COO and Supplier Support Units.

Do work that matters:

As a Manager, Technology Risk you will be a member of a team of technology risk professionals that provides Operational Risk & Compliance Support to the Technology and Security divisions. The support you provide will result in improvements to risk management and controls managed by Technology.

Key responsibilities for this role includes:

Technical

• Provide SME risk management advice to crews aligned in Chief Technology Office, for covering Global Technology Services, Engineering, SRE and IT service management domains.

• Working as part of a team of professional SMEs to provide independent, pragmatic and value adding Operational Risk advice and assurance for technology and cyber risks across the Group.

• Contributing to the oversight and monitoring of key technology and cyber risks, controls, issues, incidents, and change initiatives.

Leadership

• Work as part of a cross-skilled team that can support a range of inter-connected risk domains; speaking up and contributing to appropriate Line 2 oversight and challenge.

• Provide ideas for Line 2 risk management and assurance activities, data analytics and stakeholder reporting; contribute to a culture of learning and collaboration.

• Role model behaviours that are consistent with CBA values expectations and leadership principles; provide a safe workplace for all team members, customers and visitors.

• Develop and maintain partnerships with stakeholders; become a trusted advisor using commercial acumen, practical recommendations; and assist the business to understand where prioritised focus on key risks and compliance matters is required.

We’re interested in hearing from people who have:

• Knowledge of technology infrastructure, engineering practices, DevSecOps, IT service management, SRE/ Observability disciplines.

• Experience in Risk Management and Risk Frameworks/ 3 lines of defence model, ideally in banking.

• High quality written and verbal communication skills, report writing, evidence gathering and data analysis capabilities.

• Stakeholder and influencing skills with the ability to proactively engage Line 1 teams and engender trust with pragmatic, commercially balanced risk advice.

• A curious and humble mindset, understanding of external trends and changes, interest in continuous learning, to build risk management best practice.

​

If this sounds like the role for you then we would love to hear from you. Apply today!

We support our people with the flexibility to balance where work is done with at least half their time each month connecting in office. We also have many other flexible working options available including changing start and finish times, part-time arrangements and job share to name a few. Talk to us about how these arrangements might work in the role you’re interested in.

Advertising End Date: 29/11/2024