Senior Analyst

**OVERALL PURPOSE OF JOB**

The Cyber Security controls office within the Technology CCO, is a team of trusted and skilled risk management experts who support Cyber Security in creating a cyber-aware and secure organisation. We empower Cyber Security and the Group to manage their risk today and for the future, by providing advice and support in the effective design of intelligent identity, protection, detection, response, recovery & resilience controls.

The team delivers safe, sound and secure risk outcomes through risk management frameworks and tools; risk expertise and coaching; controls that are efficient, effective, sustainable and automated, and; risk processes that are simple to understand and apply.

In this role you’ll assist execution of strategic initiatives to improve team effectiveness and performance, help drive capability uplift activity and embed a strong and proactive risk culture. You will act as a trusted advisor to executive management within the Cyber Security team, regarding strategic planning, emerging risks and risk maturity as it aligns to the financial services sector and play a key role in ensuring risk behaviours.

**RESPONSIBILITIES/ACCOUNTABILITIES**
- Adhere to the _Code of Conduct _. _The Code of Conduct sets the standards of behaviour, actions and decisions we expect from our people
- Support Senior Manager in effective design of controls for all new and changing processes and operations, and to support the business through the implementation
- Identify, initiate and manage actions to mitigate risks and to strengthen controls, including issues identified through audits and other external processes
- Identify, lead and manage the continuous improvement of the business control environment by using data to generate insights and reports
- Manage root cause analysis of issues and incidents, identifying and implementing control improvements
- Responsible for ensuring risks are profiled and captured in the Risk Profile RCSA and updated when risk trigger events occur
- Work effectively with Line 2 colleagues to determine optimal course of action to remediate any significant data integrity issues within the BU
- Issue lifecycle activities review - assisting in the review of issue acceptance, closure and opening documents
- Responsible for data quality in maintain various databases including RiskInSite and monthly management reporting
- Contribute to a proactive risk and control culture and collaborate with the business

**PEOPLE KNOWLEDGE**
- Ability to work with cross functional teams present in India and Australia.

**SKILLSET**

Competency Name

Description

Proficiency Level

Risk Mindset

All CommBank employees are expected to proactively identify and understand, openly discusses and act on current and future risks

Skilled(S)

Ability to analyse

Assess & identify risks and opportunities and recommend appropriate actions

Skilled(S)

Influencing and consulting skills

the ability to build relationships with stakeholders at all levels

Trained(T)

Written and verbal communication

Strong written and verbal communication skills

Skilled(S)

Critical and analytical

Ability to think critically and analytically and use data driven insights to solve problems

Experienced (E)

Risk Framework Knowledge

Knowledge of Operational and Compliance Risk frameworks would be advantageous

Experienced (E)

Controls knowledge

Controls design experience

Experienced (E)

People

People leadership skills, including facilitation skill, coaching and guiding others

Experienced(E)

**QUALIFICATIONS: Education & Experience**
- 5 - 7 years’ experience in banking/financial services/other relevant experience **and/or **Minimum 3 years’ experience in Operational Risk management roles
- Sound knowledge and prior work experience in Cyber Security
- Tertiary qualifications in technology, risk management, finance, accounting or related field

Proficiency Level

Definition

Trained(T)
- Attended a training course on this skill and/or has had brief exposure to this skill.
- Uses basic terminology in regard to the skill.
- Recognizes and/or articulates basic concepts, facts, methods, techniques in day-to-day work experiences.

Experienced (E)
- Moderate exposure to this skill and related work experiences.
- Can assist other team members with questions and problems related to this skill
- Applies skill (at basic level to work situations, with some guidance.

Skilled(S)
- Extensive exposure to this skill and related work experiences.
- Applies skill (at advanced level) to work situations with medium complexity, with little or no guidance.

Expert(X)
- Regarded as a centre wide resource on this skill.
- Applies detailed knowledge and skills to complex (or new) work situations in multiple settings.
- Trains and/or directs work of other in complex facts, methods, and techniques related to the skill.

We're aware of some accessibility issues on this site, particularly for screen reader users. We want to make f