Senior Manager, Technology Risk

Senior Manager, Technology Risk

See yourself in our team

Risk Management is an independent function within CommBank that is accountable for providing advice, oversight, assurance and acceptance of key decisions to help the Group operate within its risk appetite.

The Technology and Operations Risk team provides specialist Line 2 Operational Risk and Compliance advice, assurance, challenge and oversight across Technology and COO.

Do work that matters

As Senior Manager Technology Risk, you will provide pragmatic Line 2 risk advice, assurance and oversight across the Business CIO areas.

Key responsibilities

Technology risk advice and oversight

• Provide specialist Line 2 Technology Risk advice and oversight to teams Business CIO areas.

• Support risk assessment, assurance, challenge and acceptance activities across technology risks, controls, issues, incidents, change initiatives and risk profiles.

• Monitor and assess material technology risk themes, including risks relating to cyber, cloud, data, AI, operational resilience, software engineering and technology change.

• Help stakeholders understand risk implications, control gaps, practical risk insights and where focused action is required.

• Support clear and timely identification, escalation and reporting of material technology risk and compliance matters to senior stakeholders and relevant Non-Financial Risk Committees.

• Provide input to relevant Group risk frameworks, policies and procedures where required.

Stakeholder engagement and collaboration

• Build effective relationships across technology, business and risk stakeholders.

• Provide clear, practical and commercially aware risk advice that supports better decision making.

• Work collaboratively as part of a cross-skilled team supporting interconnected technology and operational risk domains.

• Contribute ideas to improve and innovate Line 2 Risk Management assurance, analytics, AI, reporting and operational activities.

• Support a team culture focused on learning, constructive challenge, inclusion and continuous improvement.

• Role model behaviours aligned to CBA values, leadership expectations and a safe workplace.

We’re interested in hearing from people who have:

• Experience in Technology Risk, Operational Risk, Technology Assurance, Cyber Risk, Technology Audit, Software Engineering or a related field.

• An understanding of CBA's operational risk management framework, control environments and the three lines of defence model.

• Strong technical knowledge in one or more domains: tech and cyber controls, cloud, AI, software engineering, data engineering, analytics, technology resilience.

• The ability to work through ambiguity, assess complex technology risks and connect risk issues to business outcomes.

• Excellent communication and influencing skills, including the ability to engage stakeholders and explain risk matters clearly.

• A pragmatic, curious and continuous improvement-focused mindset.

• The ability to prioritise effort based on materiality, risk appetite and business impact.

• Confidence working in an agile and collaborative environment where early engagement, clear judgement and timely delivery matter.

What will help you succeed

You do not need to be an expert in every technology domain. You will be most effective in this role if you can combine sound risk judgement, technology curiosity, execution excellence and strong stakeholder engagement.

This role will suit someone who can ask high quality questions, assess what matters, challenge constructively and translate complex issues into actionable risk insights. It is also an opportunity to contribute to how Line 2 oversight continues to evolve through better use of data, analytics, automation and AI.

Advertising End Date: 04/09/2026