Senior Manager

**Organization**:At CommBank, we never lose sight of the role we play in other people’s financial wellbeing. Our focus is to help people and businesses move forward to progress. To make the right financial decisions and achieve their dreams, targets, and aspirations. Regardless of where you work within our organisation, your initiative, talent, ideas, and energy all contribute to the impact that we can make with our work. Together we can achieve great things.

**Job Title**:Senior Manager - Risk in Change - CBA India
**Location**:Bengaluru - Manyata Tech Park

**Business & Team**:The Technology Chief Controls Office (CCO) team is a Line 1 risk team responsible for supporting CBA in continuing to mature its risk culture and establish and maintain strong risk practices. Technology CCO is responsible for providing end to end risk advice and guidance. We support our delivery teams across CommBank in their development and operation of solutions ranging across innovative product platforms for our customers to essential tools within our business.

**Impact & Contribution**:The Senior Manager, Change Risk is part of the Technology CCO team that supports CMRS related activities for Technology. Change Risk team is responsible for ensuring that new and changing processes are assessed, awareness is raised, and risk mitigations are in place. They achieve this through the effective design & implementation of controls to enable compliance and supporting the business through new and changing processes.

**Roles & Responsibilities**:

- Adhere to the _Code of Conduct _. _The Code of Conduct sets the standards of behaviour, actions and decisions we expect from our people.
- Support and lead any CMRS policy, standard and process review activities. This would include interacting with external stakeholders and internal TCCO teams & Leadership for updates and awareness sessions.
- Perform CMRS assessments for Technology initiatives which are across the Technology portfolios.
- Review change request received for Technology. Ensure materiality assessment is performed and associated RIS entries are created / updated including leadership writeup for approval.
- CMRS related reporting:

- Create and maintain CMRS pipeline for TCCO.
- Monthly reporting of CMRS cases at TCCO level
- Thematic analysis of gaps identified in CMRS cases to ensure better proactive risk management.
- Conduct CMRS guild meeting to share best practices among TCCO colleagues doing CMRS activity.
- Oversight on Technology transitions to India
- Assessment of compliance with applicable regulatory obligations relating to the use of technology services and third parties.
- Embedding the Group’s policies, processes and frameworks associated with the management of Risk in Change (CMRS).
- Delivery of risk and control enablement initiatives to achieve better risk outcomes.
- Provide specialist advice on the Risk In Change process (current and emerging)
- Inform and influence senior stakeholders to achieve better risk outcomes.
- Supporting the stakeholders to build effective IT controls, through thought leadership, industry knowledge and technical capability
- Identify process improvement/enhancement opportunities and lead its implementation
- Work effectively with Line 2 colleagues to determine optimal course of action to remediate any significant data integrity issues within the BU.
- Contribute to a proactive risk and control culture and collaborate with the business.
- Complete various group risk projects/ initiatives/ programs.
- This would be an individual contributor role as part CMRS central capability team but may require providing local line management to resources of different portfolios.

**Essential Skills**:

- Minimum 12 years’ experience in risk and/or control advisory in banking/financial services/professional services or other relevant sectors.
- Strong soft skills, including a growth mindset, stakeholder management, critical thinking, ability to provide constructive feedback and to synthesize information in an environment of white noise and heavy information flow.
- Experience in Change Risk. Cloud, Technology and Cyber is preferred.
- Experience with project change and implementation risk advisory.Familiarity with APRA standards (not limited to CPS220, 230, 231, 232) or Cloud risk frameworks is favorable.

**Education Qualifications**:

- Bachelor’s degree/Master’s degree in Engineering in Computer Science/Information Technology
- CISM, CISA, CRISC, CGEIT, CDPSE, COBIT, ITIL, CISSP or other IT risk related certifications (e.g., ISO200x, PCI/DSS) holder is favorable

We're aware of some accessibility issues on this site, particularly for screen reader users. We want to make finding your dream job as easy as possible, so if you require additional support please contact HR Direct on 1800 989 696.

Advertising End Date: 08/02/2025