Senior Manager Technology Risk

See yourself in our team: 

Risk Management is an independent function within CommBank which is accountable for providing approval and acceptance of decisions to ensure the Group remains within its risk appetite. 

 The Technology and Operations (Tech & Ops) Risk team is responsible for providing specialist Operational Risk and Compliance (OR&C) advice, assurance and acceptance/approval of decisions made across the Technology, COO and Supplier Support Units. 

 Do work that matters: 

Are you a technology professional who thrives on identifying, assessing and managing risk in complex environments? Join our dynamic team of technology specialists as a Senior Manager as we combine technical acumen with a risk mindset. This is an awesome opportunity to lead with impact by working with skilled technologists in shaping how we manage technology risk in a rapidly changing environment. You will help build resilience, safeguard innovation, and ensure our digital foundations are strong, secure, and trusted—by embedding effective controls that proactively manage risk and help to cultivate a robust risk management culture. 

Key responsibilities for this role includes: 

Technical 

• Strong technical background with deep understanding of enterprise technology domains covering Networks, Backups, Global Hosting Services, Mainframe, Data centres and a proven ability to influence and challenge technology teams on risk management practices.

• Lead assurance reviews and apply advanced risk management principles to evaluate and strengthen technology controls and risk mitigations across complex IT infrastructure and emerging technologies.

• Oversee and monitor critical technology risks and controls, including issue and incident management, change-related risks and risk acceptances.  

• Contribute to non-financial risk committees (NFRCs), attestations, incident reporting, implementation of changes to the risk framework, and other responsibilities aligned with CBA’s internal policies, governance standards, and the Group’s Risk Management Approach and Frameworks. 

• Drive continuous improvement in assurance practices, embedding lessons learnt and industry best practices into risk management processes. 

Leadership 

• Work as part of a cross-skilled team that can support a range of inter-connected risk domains; speaking up and contributing to appropriate Line 2 oversight and challenge. 

• Provide ideas for Line 2 risk management and assurance activities, data analytics and stakeholder reporting; contribute to a culture of learning and collaboration. 

• Role model behaviours that are consistent with CBA values expectations and leadership principles; provide a safe workplace for all team members, customers and visitors. 

• Develop and maintain partnerships with stakeholders; become a trusted advisor using commercial acumen, practical recommendations; and assist the business to understand where prioritised focus on key risks and compliance matters is required. 

• Ability to collaborate effectively with both technical and non-technical teams to implement robust controls and reduce risk, while communicating complex concepts in simple, easy-to-understand language.

We’re interested in hearing from people who have: 

• Foundational to intermediate technical expertise of technology, coupled with a strong risk-oriented mindset and the ability to think critically assess and manage technology risk. 

• Hands-on experience applying risk management principles within technical environments, including conducting technology audits and collaborating across all Three Lines of Defence to ensure secure, compliant, and well-governed solutions.

• Strong written and verbal communication skills report writing, evidence gathering and data analysis capabilities. 

• Stakeholder and influencing skills with the ability to proactively engage Line 1 teams and engender trust with pragmatic, commercially balanced risk advice. 

• Qualification/industry accreditation in technology and technology risk (e.g. degree in IT/Computer Science, CISA, CRISC, CISSP, CISM, AWS certifications)  

• A curious and humble mindset, understanding of external trends and changes, interest in continuous learning, to build risk management best practice. 

If this sounds like the role for you then we would love to hear from you. Apply today! 

We support our people with the flexibility to balance where work is done with at least half their time each month connecting in office. We also have many other flexible working options available including changing start and finish times, part-time arrangements and job share to name a few. Talk to us about how these arrangements might work in the role you’re interested in. 

If you're already part of the Commonwealth Bank Group (including Bankwest, x15ventures), you'll need to apply through Sidekick to submit a valid application. We’re keen to support you with the next step in your career.

We're aware of some accessibility issues on this site, particularly for screen reader users. We want to make finding your dream job as easy as possible, so if you require additional support please contact HR Direct on 1800 989 696.

If you're already part of the Commonwealth Bank Group (including Bankwest, x15ventures), you'll need to apply through Sidekick to submit a valid application. We’re keen to support you with the next step in your career.

We're aware of some accessibility issues on this site, particularly for screen reader users. We want to make finding your dream job as easy as possible, so if you require additional support please contact HR Direct on 1800 989 696.