Senior Director, Enterprise Non-Financial Risk

Optus Enterprise; Melbourne; Híbrido; AUD 260.000 - 380.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Flexible working arrangements

Parental Leave

Counselling services

Descripción de la vacante

Optus is seeking an experienced Senior Director of Non-Financial Risk Management to establish enterprise standards and lead the end-to-end RCSA program, incidents, issues, and resilience across technology, cyber, network and regulatory domains. The role partners with executive teams to drive risk visibility and disciplined remediation.

This senior leadership position reports into the EGM, Integrated Risk and Controls Management, and focuses on translating risk policies into practical,

Formación

• 15+ years’ experience in non-financial risk, operational risk, risk frameworks or controls within a large, complex organisation.
• Deep expertise with RCSA, risk acceptance, incidents, issues management and control assessment, resilience practices, tooling and outcomes.
• Proven success designing, implementing and simplifying enterprise risk standards, procedures and governance practices.
• Strong understanding of risk management within highly regulated or critical infrastructure environments.
• Ability to connect incidents, issues and control weaknesses to root causes and systemic management actions.

Responsabilidades

• Lead Optus' enterprise approach to non-financial risk management, establishing standards, methodologies and best practices across the business.
• Own and continuously improve core risk processes including RCSA, issues management, incident management, risk acceptance and material change assessments.
• Lead the end-to-end delivery of the enterprise RCSA program, scheduling cycles, facilitating self-assessments, aggregating results and quality-assuring outputs across business units.
• Translate the enterprise Risk Management Approach (RMA) and Risk Appetite Statement (RAS) into practical, business-facing risk policies, standards and minimum requirements that can be consistently applied.
• Set clear standards for issue severity rating, ownership, closure criteria, evidence and escalation, and for incident classification, root cause analysis and lessons learned.
• Scope and conduct post-incident reviews (PIRs), leading independent root cause analysis and delivering actionable recommendations, and maintain the lessons-learnt repository for the organisation.
• Partner with specialist risk teams and business leaders to embed consistent risk practices across technology, cyber, network, resilience, privacy, fraud and security domains.
• Build practical NFR capability across the Three Lines of Defense through guidance, education and targeted uplift.
• Support Executive and Board reporting on non-financial risk themes, issues, incidents, remediation, resilience and control environment trends.
• Act as the enterprise architect for non-financial risk, designing the risk processes and practices that are built into Optus' GRC platform - critical to enabling scalable, well-managed risk across the organisation.

Conocimientos

Leadership

Stakeholder management

Risk management

RCSA

Incident management

Governance

Regulatory compliance

Educación

Bachelor's degree

Herramientas

GRC tooling

GRC platform

Descripción del empleo

Optus is seeking an experienced Senior Director of Non-Financial Risk Management to establish enterprise standards and lead the end-to-end RCSA program, incidents, issues, and resilience across technology, cyber, network and regulatory domains. The role partners with executive teams to drive risk visibility and disciplined remediation.

This senior leadership position reports into the EGM, Integrated Risk and Controls Management, and focuses on translating risk policies into practical,