Manager - Risk and Control Enablement (AI Risk)

Organization: At CommBank, we never lose sight of the role we play in other people's financial wellbeing. Our focus is to help people and businesses move forward to progress. To make the right financial decisions and achieve their dreams, targets, and aspirations. Regardless of where you work within our organisation, your initiative, talent, ideas, and energy all contribute to the impact that we can make with our work. Together we can achieve great things.
Job Title: Manager - Risk and Control Enablement (AI Risk)
Location: Bengaluru - Manyata Tech Park
Business & Team: The Technology Chief Controls Office (CCO) team is a Line 1 risk team responsible for supporting CBA in continuing to mature its risk culture and establish and maintain strong risk practices. Technology CCO is responsible for providing end to end risk advice and guidance. We support our delivery teams across CommBank in their development and operation of solutions ranging across innovative product platforms for our customers to essential tools within our business.
Impact & contribution: The Manager, Risk and Control Enablement is part of the Technology CCO team that supports the Chief Data & Analytics Office (CDAO), the risk steward for AI risk for the bank, providing specialist risk advice. This role is primarily responsible for ensuring that new and changing strategic initiatives are risk assessed with appropriate controls and mitigations in place. They achieve this by identifying and assessing the key risks across multiple domains of AI, technology, cyber security, data, privacy and validating the implementation of appropriate controls. This role will work closely with stakeholders involved in AI strategy and delivery, delivery owners across Technology and the business to strengthen and drive effective risk management and to assist with uplifting controls and risk culture.
Roles & Responsibilities:

• Adhere to the Code of Conduct. The Code of Conduct sets the standards of behaviour, actions and decisions we expect from our people.
• Oversee and support the business on the design and implementation of controls to enable better risk and compliance outcomes, providing guidance and advice to senior leaders on their application.
• Lead and coach extended team members to conduct risk assessments, advise on delivery risks and delivered risks including impact assessments, advise on the effective design of control specifications, and validate the effective design of the controls implemented.
• Lead and build a proactive risk and control culture.
• Partner with the business to deliver pragmatic insights that enable risk based and informed decision making and provide assurance over controls.

Essential Skills:

• 8+ years experience in risk and/or control advisory in banking/financial services/professional services or other relevant sectors, with 5+ years of experience in Cloud, Technology, Cyber, Data/AI or Operational Risk practitioner roles.
• Experience with project change risk (Risk in Change).
• Familiarity with APRA standards (not limited to CPS220, 230, 231, 232) or Cloud risk frameworks is favorable.
• Strong soft skills, including stakeholders management, critical thinking, ability to provide constructive challenge, report writing, etc. is desired.
• Ability to work independently as well as in a team.

Education Qualification:

• Bachelor's degree/Master's degree in Engineering in Computer Science/Information Technology/ Electrical and Electronics Engineering / Electronics & Communication Engineering.
• Certification such as CISM, CISA, CRISC, CGEIT, CDPSE, COBIT, ITIL, CISSP or other IT risk related certifications (e.g., ISO200x, PCI/DSS) holder is favorable.