Organization: At CommBank, we never lose sight of the role we play in other people’s financial wellbeing. Our focus is to help people and businesses move forward to progress. To make the right financial decisions and achieve their dreams, targets, and aspirations. Regardless of where you work within our organisation, your initiative, talent, ideas, and energy all contribute to the impact that we can make with our work. Together we can achieve great things.
Job Title: Risk and Control Enablement – Manager
Location: Bengaluru - Manyata Tech Park
Business & Team: The Technology Chief Controls Office (CCO) team is a Line 1 risk team responsible for supporting CBA in continuing to mature its risk culture and establish and maintain strong risk practices. Technology CCO is responsible for providing end to end risk advice and guidance. We support our delivery teams across CommBank in their development and operation of solutions ranging across innovative product platforms for our customers to essential tools within our business.
Impact and Contribution: The role will support the IB&M Technology domain. The objective of the role will be to support the maintenance of an effective risk management framework by leading risk engagement within these domains. The nature of the role involves specific engagement across multiple stakeholders ranging from analyst to CIO level.

Roles & Responsibilities: You will be expected to perform the following tasks in a manner consistent with CBA’s Values and People Capabilities:

• Responsible for the design and implementation and/or support the Institutional Banking & Markets business to design and implement controls to enable better risk and compliance outcomes.
• Maintain and embed the Operational and Risk Management Framework (ORMF).
• Ensure new risks or changes to risks arising out of the domains are clearly articulated and documented, understood by domain leads / stakeholders and approved / risk accepted at the appropriate level.
• Responsible for ensuring the correct risk and controls overlay the end-to-end process mapping and documentation management to support the control process.
• Identify, lead and manage the continuous improvement of the business control environment by using data to generate insights and reports.
• Advise on strategic technology change initiatives.
• Contribute to a proactive risk and control culture and collaborate with the business Conduct root cause analysis of issues and incidents, ensure action plans are appropriate, and target dates are met.
• Assist in the management of the bank’s Issues Management Framework, (including audit activity), in line with Group standards.
• Work effectively with Line 2 colleagues to determine optimal course of action to manage risks.
• Support the delivery of papers, presentations and reports for the Institutional Banking & Markets Non-Financial Risk Committee and other committees, forums and project committees as required.
• Manage root cause analysis of issues and incidents, identifying and implementing control improvements.
• Responsible for ensuring risks are profiled and captured in the Risk Profile (RCSA) and updated when risk trigger events occur.
• Develop and producing risk governance reporting to provide insights across the portfolio from a risk lens and for senior management decisions.

• Support the delivery of Change risk assessments for Technology projects as and when needed.Ensure compliance with the Group Change risk Management Standard and Procedures, and ensure records and evidence are retained in the risk tools and systems and perform o ther ad-hoc duties as needed.

ESSENTIAL SKILLS:

• 8-12 years of strong experience in Operational risk management, specifically Technology risks.
• CISA, CRISC, CGEIT, CISM, ITIL, COBIT or other IT Risk related certifications (e.g. Basel II, GS007, AS3402, ISO2700x)
• Experience in technology risk & controls function is preferred
• Working experience in Technology Operations and Development domains
• Ability to analyse/identify risks and opportunities and recommend appropriate actions
• Strong understanding of governance and Change risk activities
• Influencing and consulting skills, the ability to build relationships with executive stakeholders
• Ability to think critically and analytically and use data driven insights to solve problems; Strong written and verbal communication skills
• Strong understanding and knowledge of the risk and control environment and framework with proven experience with Operational and compliance risksUnderstanding of ITIL Service Management processes

EDUCATION QUALIFICATION:

• B achelor’s degree/Master’s degree in Engineering in Computer Science/Information Technology
• Professional certificates like CISA, CRISC, CGEIT, CISM, ITIL, COBIT or other IT Risk related certifications (e.g. Basel II, GS007, AS3402, ISO2700x) will be preferred
  If you’re already part of the Commonwealth Bank Group (including Bankwest, x15ventures), you’ll need to apply through Sidekick to submit a valid application. We’re keen to support you with the next step in your career.
  We’re aware of some accessibility issues on this site, particularly for screen reader users. We want to make finding your dream job as easy as possible, so if you require additional support please contact HR Direct on 1800 989 696.
  Advertising End Date: 16/02/202

• Responsible for the design and implementation and/or support the Institutional Banking & Markets business to design and implement controls to enable better risk and compliance outcomes.
• Maintain and embed the Operational and Risk Management Framework (ORMF).
• Ensure new risks or changes to risks arising out of the domains are clearly articulated and documented, understood by domain leads / stakeholders and approved / risk accepted at the appropriate level.
• Responsible for ensuring the correct risk and controls overlay the end-to-end process mapping and documentation management to support the control process.
• Identify, lead and manage the continuous improvement of the business control environment by using data to generate insights and reports.
• Advise on strategic technology change initiatives.
• Contribute to a proactive risk and control culture and collaborate with the business Conduct root cause analysis of issues and incidents, ensure action plans are appropriate, and target dates are met.
• Assist in the management of the bank’s Issues Management Framework, (including audit activity), in line with Group standards.
• Work effectively with Line 2 colleagues to determine optimal course of action to manage risks.
• Support the delivery of papers, presentations and reports for the Institutional Banking & Markets Non-Financial Risk Committee and other committees, forums and project committees as required.
• Manage root cause analysis of issues and incidents, identifying and implementing control improvements.
• Responsible for ensuring risks are profiled and captured in the Risk Profile (RCSA) and updated when risk trigger events occur.
• Develop and producing risk governance reporting to provide insights across the portfolio from a risk lens and for senior management decisions.
• Support the delivery of Change risk assessments for Technology projects as and when needed.Ensure compliance with the Group Change risk Management Standard and Procedures, and ensure records and evidence are retained in the risk tools and systems and perform o ther ad-hoc duties as needed