Senior Manager Artificial Intelligence Tech Risk

cba; Sydney; On-site; AUD 180,000 - 240,000; Full time

Job summary

CommBank is seeking a Senior Manager, Artificial Intelligence Technology Risk to lead Line 2 risk oversight for AI platforms, data and cyber risks. You will build trusted relationships with CTO, CAIO and senior AI leaders to guide risk decisions.

You will drive complex risk assessments, deliver independent challenge, and translate technical risk into clear governance actions while coaching the team across technology risk domains.

Qualifications

• Experience leading AI technology risk assessments and challenges.
• Ability to build relationships with Technology, Cyber and AI leaders.
• Proven track record presenting risk findings to governance forums.

Responsibilities

• Lead independent AI technology risk advice and challenge to CTO/CAIO teams.
• Own Line 2 oversight for AI portfolio and set priorities.
• Assess risks and controls for generative AI, LLMs, and data pipelines.
• Form evidence-based risk opinions and recommendations for decisions.
• Lead risk-based Line 2 oversight and assurance activities.
• Prepare concise risk reporting and governance materials.

Skills

AI risk management

Leadership

Stakeholder influence

Risk reporting

Job description

See yourself in our team:

Risk Management is an independent function within CommBank accountable for providing approval and acceptance of decisions to ensure the Group remains within its risk appetite.

The Technology and Operations Risk team is responsible for providing specialist Operational Risk and Compliance advice, assurance, oversight and acceptance or approval of decisions made across the Technology, COO and Supplier Support Units.

The Artificial Intelligence Technology Risk team provides specialist Line 2 oversight, advice, challenge and assurance in relation to the technology, cyber, data and operational risks arising from the Group's development and use of artificial intelligence. The team supports the safe and sustainable adoption of AI by providing independent risk insights across AI platforms, foundational capabilities, services and use cases.

Do work that matters:

As a Senior Manager, Artificial Intelligence Technology Risk , reporting to the Executive Manager, you will be a member and technical leader within a team of technology risk professionals providing Operational Risk and Compliance support to the Chief Artificial Intelligence Office (CAIO) that are building and operating the core foundations used to develop, deploy and manage AI technology across CBA.

You will lead and support complex and material AI technology risk assessments, provide independent and commercially balanced challenge, form clear Line 2 risk opinions and support sound risk acceptance and approval decisions. Your work will improve the identification and management of AI, data, technology, and cyber risks and strengthen the design and operating effectiveness of controls managed by Technology.

The role requires strong judgement, leadership and senior stakeholder influence. You will build trusted relationships with Technology, Cyber and AI leaders, represent Line 2 in senior governance and change forums, guide the delivery of risk and assurance activities, and coach team members in the consistent application of risk management practices.

Key responsibilities for this role include:

Technical

• Lead the provision of specialist, independent and commercially balanced AI technology risk advice and constructive challenge to teams aligned to the Chief Technology Office and Chief Artificial Intelligence Office, particularly those building and operating the Group's foundational AI platforms and capabilities.
• Own and coordinate Line 2 oversight for an assigned AI technology portfolio, setting priorities based on materiality, strategic change, emerging risk, control performance and the Group's risk appetite.
• Assess the risks and controls associated with generative AI and agentic systems, including retrieval-augmented generation, LLM-based applications, agentic workflows, orchestration tooling, APIs, data pipelines, cloud and platform infrastructure, identity and access management, security, resilience, third-party dependencies, monitoring and human oversight.
• Form and communicate clear, evidence-based Line 2 risk opinions and recommendations, including whether identified risks require remediation, escalation, additional assurance, formal acceptance or referral to the relevant decision-making authority.
• Shape and lead the delivery of risk-based Line 2 oversight and assurance activities, including thematic reviews, risk-in-change assessments, control reviews and monitoring of material AI technology initiatives.
• Oversee monitoring and reporting of three lines of accountability activities for the assigned portfolio, including the effective operation of the Risk Management Approach, Operational Risk Management Framework and Compliance Management Framework in support of CPS 220.
• Lead the oversight and monitoring of key AI, data, technology and cyber risks, controls, issues, incidents, obligations and risk-in-change activities, identifying systemic themes, concentrations and emerging risks.
• Lead the identification, escalation and reporting of material technology, cyber and compliance matters to relevant stakeholders, including NFRCs, the Executive Manager, General Manager and Technology and Operations CRO.
• Prepare and present concise, decision-useful risk reporting and governance material that translates complex technical matters into clear risk implications, priorities and recommended actions.
• Drive the continuous uplift of AI risk frameworks, standards, control guidance, assurance approaches, risk data and stakeholder reporting, incorporating relevant external developments and lessons from incidents and assurance activity.
• Coordinate with other Line 2 specialists, Line 1 risk teams, Group Audit and Assurance and relevant subject-matter experts to provide integrated risk coverage and reduce unnecessary duplication.

Leadership

• Provide technical and delivery leadership across a cross-skilled team supporting interconnected AI, data, technology, cyber and operational risk domains.
• Establish clear expectations and quality standar