Risk and Controls Manager Line 1

Business and team:

Were a team of talented technology and banking operations experts, working together to deliver cutting-edge, innovative and exceptional experiences for our customers. We work across operational disciplines, including the financial crime lifecycle, which includes investigations, payment monitoring and customer due diligence. Our team of global best technologists harness the rapid acceleration of technology to create resilient, reliable banking experiences that make a real difference for customers. This requires the brightest minds in AI, data and cyber security.

Impact and Contributions:

The Technology Chief Controls Office (TCCO) is a Line 1 risk function that enables Technology to deliver safe, sound, and secure outcomes for our customers and the community. TCCO supports this through pragmatic risk management frameworks, tools, and advisory, providing deep risk expertise to uplift capability. We focus on controls, simplifying risk processes, and embedding practices that are practical and scalable. This role sits within the Retail Technology (RT) Centre of Excellence (CoE) in TCCO and partners closely with stakeholders across Retail, Cyber, Technology Platforms & Products, Line 2 and Group Audit to strengthen and mature risk management across the Group.

The Technology Chief Controls Office (TCCO) is a Line 1 Risk team responsible for supporting CBA in continuing to mature its risk culture and establish & maintain strong risk practices. You’ll play a supporting role within a high-performing team accountable for strengthening, embedding, and continuously improving the risk and control environment across Retail Technology portfolio. This role is central to the execution of Line 1 risk obligations within Retail particularly across issue lifecycle management, control assessments, and CMRS integrity, which underpin an accurate and defensible risk position. The operating cadence of this role relies on consistent and timely updates to issues, actions, and control assessments to support governance forums and maintain data integrity across CMRS.

Roles & Responsibilities:

• Support senior stakeholders across Retail Technology, TCCO and Business teams by providing risk and control insights to inform decision making.
• Work effectively in a complex environment, contributing to the delivery and continuous improvement of Retail Technology initiatives.
• Build strong working relationships across TCCO, Cyber, Technology and Business teams to support effective risk management.
• Contribute to the use of AI and automation to enhance risk detection and control effectiveness.
• Support the development of more data-driven approaches to risk management, including use of data quality metrics, lineage, and monitoring.
• Assist in the design, assessment, and uplift of controls across data platforms, pipelines, and data products.
• Identify opportunities to simplify, standardise, and automate controls to improve efficiency and reduce manual effort.
• Support stakeholders in embedding fit-for-purpose controls across its lifecycle.
• Analyse risk & control trends, issues and incidents to identify patterns, root causes, and opportunities for improvement.
• Contribute to uplift initiatives that strengthen risk management practices and control environments.
• Translate technical and risk concepts into simple, actionable messages for both technical and non-technical audiences .

Essential Skills:

• 8+ years’ experience in risk, control advisory, change management risk, data governance, or technology risk within banking, financial services, consulting, or a related industry.
• Experience supporting risk and control activities across technology environments (e.g. control testing, risk assessments, issue management, or control design), data platforms, analytics, and supporting governance & risk reporting activities.
• Ability to work with and support stakeholders across business and technology teams, with some exposure to senior stakeholders.
• Good analytical and problem-solving skills, with the ability to use data to identify risks, trends, and improvement opportunities.
• Effective communication skills, with the ability to translate risk and control concepts for both technical (e.g. engineering/technology support teams) and non-technical audiences.

Education: Bachelor's or Master's degree in computer science, Information Technology, Data, Engineering, or a related discipline. Relevant industry certifications such as CISA, CRISC, CISM, COBIT, ITIL, or data/privacy-focused certifications is preferred.