Senior Manager

**OVERALL PURPOSE OF JOB**

The Cyber Security controls office within the Technology CCO, is a team of trusted and skilled risk management experts who support Cyber Security in creating a cyber-aware and secure organisation. We empower Cyber Security and the Group to manage their risk today and for the future, by providing advice and support in the effective design of intelligent identity, protection, detection, response, recovery & resilience controls.

The team delivers safe, sound and secure risk outcomes through risk management frameworks and tools; risk expertise and coaching; controls that are efficient, effective, sustainable and automated, and; risk processes that are simple to understand and apply.

In this role you’ll assist execution of strategic initiatives to improve team effectiveness and performance, help drive capability uplift activity and embed a strong and proactive risk culture. You will act as a trusted advisor to executive management within the Cyber Security team, regarding strategic planning, emerging risks and risk maturity as it aligns to the financial services sector and play a key role in ensuring risk behaviours.

The role will be the lead risk partner for the Cyber Security Top of the House portfolio, drawing Cyber risk data-driven insights to support the CISO, leading the deliverable of governance papers and providing advice and support to the third-party and supplier security portfolio.

**RESPONSIBILITIES/ACCOUNTABILITIES**
- Adhere to the _Code of Conduct _. _The Code of Conduct sets the standards of behaviour, actions and decisions we expect from our people.
- The key responsibilities for this role:

- You will be expected to perform the following tasks in a manner consistent with CBA's Values and People Capabilities:

- Lead operational and compliance risk advice to Cyber Security on the design and operation of controls.
- Lead delivery of papers, presentations and reports for the Cyber Security Non-Financial Risk Committee and other committees, forums and project committees as required.
- Develop and drive the automation of Cyber Security controls and other strategic initiatives.
- Coach, mentor and lead team members and peers enabling them to develop their CBA and risk knowledge and become effective risk professionals.
- Trusted advisor to the Cyber Security functions on the management of existing and emerging Cyber risks via proper design and implementation of Cyber Security controls.
- Manage root cause analysis of issues and incidents, identifying and implementing control improvements.
- Responsible for ensuring risks are profiled and captured in the Risk Profile (RCSA) and updated when risk trigger events occur.
- Developing and driving execution of the risk and control environment strategy supporting the Technology and business partner’s strategy across Cyber Security.
- Providing operational and compliance risk advice to the business on compliance attestations requirements that fall under CPS220, CPS231, CPS232 and CPS234.
- Develop and producing executive reporting to provide insights across the portfolio from a risk lens and for senior management decisions.
- Deliver and complete required risk-in-change assessments for the Cyber technology projects.
- Ensure compliance with the Group Risk-in-change Standard and Procedures, and ensure records and evidence are retained in the risk tools and systems.
- Responsible for ensuring the correct risk and controls overlay the end-to-end process mapping and documentation management to support the control process.
- Contribute to a proactive risk and control culture and collaborate with the business.
- Complete various group risk projects/ initiatives/ programs.
- Assists in the identification, assessment and resolutions of complex issues/problems.
- Required to assess and resolve non-standard/standard issues/problem largely on own initiative

**PEOPLE MANAGEMENT**
- Leading a team of 0-2 people to deliver the above responsibilities.
- Manage the performance cycle of the Reports and be a career counsellor.
- Coaches and nurture the team members to grow them technically as well as in team management.

**SKILLSET**

Competency Name

Description

Proficiency Level

Risk Mindset

All CommBank employees are expected to proactively identify and understand, openly discusses and act on current and future risks

Skilled(S)

Ability to analyse

Assess & identify risks and opportunities and recommend appropriate actions

Skilled(S)

Influencing and consulting skills

the ability to build relationships with stakeholders at all levels

Skilled(S)

Written and verbal communication

Strong written and verbal communication skills

Skilled(S)

Critical and analytical

Ability to think critically and analytically and use data driven insights to solve problems

Skilled(S) / Expert(X)

Risk Framework Knowledge

Knowledge of Operational and Compliance Risk frameworks would be advantageous

Experienced (E)

Controls knowledge

Controls design