Senior Manager – Risk and Control Enablement (AI Risk Management)

Organization:

At CommBank, we never lose sight of the role we play in other people’s financial wellbeing. Our focus is to help people and businesses move forward to progress. To make the right financial decisions and achieve their dreams, targets and aspirations. Regardless of where you work within our organisation, your initiative, talent, ideas and energy all contribute to the impact that we can make with our work. Together we can achieve great things.

Job Title: Senior Manager – Risk and Control Enablement (AI Risk Management)
Location: Bengaluru - Manyata Tech Park

Business & Team:

The Technology Chief Controls Office (CCO) team is a Line 1 risk team responsible for supporting CBA in continuing to mature its risk culture and establish and maintain strong risk practices. Technology CCO is responsible for providing end to end risk advice and guidance.

Impact & Contribution:

The Senior Manager, Risk and Control Enablement is part of the Technology CCO team that supports the Chief Data & Analytics Office (CDAO) providing specialist risk advice. Chief Data & Analytics Office is the risk steward for Data and AI risk for the bank. CDAO owns and operates over 100 IT Services (including the data warehouse / data lake and AI platforms for the Group) and is part of a tech simplification strategy to transform and migrate to new technologies including the cloud. This role ensures new and changing strategic initiatives are risk assessed with proper controls. It involves identifying and assessing key risks in technology, cybersecurity, data, AI, and privacy, and validating control implementations.

Roles & Responsibilities:

• Oversee and support the business on the design and implementation of controls to enable better risk and compliance outcomes, providing guidance and advice to senior leaders on their application.

• Lead and coach extended team members to conduct technology risk assessments, advise on delivery risk and delivered risk including impact assessments, advise on the effective design of technology control specifications, and validate the effective design of the technology controls implemented.

• Lead and build a proactive risk and control culture.

• Partner with the business to deliver pragmatic insights that enable risk based and informed decision making and provide assurance over controls.
  PEOPLE MANAGEMENT

• Leading a team of 0-2 people to deliver the above responsibilities and manage the performance cycle of the Reports and be a career counsellor.

• Coaches and nurture the team members to grow them technically as well as in team management.

• Sufficient experience or specialized knowledge to allow application/modification of existing methods and systems on own initiative in line with business context.

Essential Skills:

• Minimum 12 years’ experience in risk and/or control advisory in banking/financial services/professional services or other relevant sectors.

• Strong soft skills, including a growth mindset, stakeholder management, critical thinking, ability to provide constructive feedback and to synthesize information in an environment of white noise and heavy information flow.

• Experience in Cloud, Technology, Cyber and AI/data science practitioner roles is preferred.

• Experience with project change and implementation risk advisory.

• Familiarity with APRA standards (not limited to CPS220, 230, 231, 232) or Cloud risk frameworks is favourable.

Education Qualification:

• Bachelor’s degree/Master’s degree in Engineering in Computer Science/Information Technology

• CISM, CISA, CRISC, CGEIT, CDPSE, COBIT, ITIL, CISSP or other IT risk related certifications (e.g., ISO200x, PCI/DSS) holder is favourable