Senior Director, Enterprise Non-Financial Risk (Hybrid)

Singtel; Melbourne; On-site; AUD 250,000 - 360,000; Full time

Benefits offered by this job

Competitive remuneration

Flexible working arrangements

Parental Leave

Employee discounts

Diversity and inclusion initiatives

Job summary

Optus is seeking a Senior Director, Non-Financial Risk Management to lead the enterprise risk function and translate risk concepts into practical governance across technology, cyber, resilience and security domains. You will drive standards, respond to incidents, and report to the executive team, shaping the future of risk management.

Open to candidates based in Sydney or Melbourne, this role requires a seasoned leader with deep NFR expertise and strong stakeholder engagement to ensure risk is

Qualifications

• Minimum 15 years’ experience in non-financial risk, operational risk, risk frameworks or controls within a large, complex organisation.
• Deep expertise with RCSA, risk acceptance, incidents, issues management and control assessment, resilience practices, tooling and outcomes.
• Proven success designing, implementing and simplifying enterprise risk standards, procedures and governance practices.

Responsibilities

• Lead Optus' enterprise approach to non-financial risk management, establishing standards, methodologies and best practices across the business.
• Own and continuously improve core risk processes including RCSA, issues management, incident management, risk acceptance and material change assessments
• Lead the end-to-end delivery of the enterprise RCSA program, scheduling cycles, facilitating self-assessments, aggregating results and quality-assuring outputs across business units.
• Translate the enterprise Risk Management Approach (RMA) and Risk Appetite Statement (RAS) into practical, business-facing risk policies, standards and minimum requirements that can be consistently applied.
• Set clear standards for issue severity rating, ownership, closure criteria, evidence and escalation, and for incident classification, root cause analysis and lessons learned.
• Scope and conduct post-incident reviews (PIRs), leading independent root cause analysis and delivering actionable recommendations, and maintain the lessons-learnt repository for the organisation.
• Partner with specialist risk teams and business leaders to embed consistent risk practices across technology, cyber, network, resilience, privacy, fraud and security domains.
• Build practical NFR capability across the Three Lines of Defense through guidance, education and targeted uplift.
• Support Executive and Board reporting on non-financial risk themes, issues, incidents, remediation, resilience and control environment trends.
• Act as the enterprise architect for non-financial risk, designing the risk processes and practices that are built into Optus’ GRC platform — critical to enabling scalable, well-managed risk across the organisation.

Skills

Non-financial risk

RCSA

Incident management

Issue management

Stakeholder engagement

Risk governance

Telecommunications domain

Education

15+ years experience in non-financial risk

Tools

GRC platform

risk analytics tools

Job description

Optus is seeking a Senior Director, Non-Financial Risk Management to lead the enterprise risk function and translate risk concepts into practical governance across technology, cyber, resilience and security domains. You will drive standards, respond to incidents, and report to the executive team, shaping the future of risk management.

Open to candidates based in Sydney or Melbourne, this role requires a seasoned leader with deep NFR expertise and strong stakeholder engagement to ensure risk is