Senior Manager Supplier Operational Risk and Compliance

Commonwealth Bank; Sydney; On-site; AUD 180,000 - 240,000; Full time

Job summary

Commonwealth Bank is seeking a Senior Manager, Supplier Operational Risk and Compliance to provide independent Line 2 oversight across supplier risk for Technology and Operations. The role supports risk framework development, controls and policy guidance while advising on risk activities and incidents.

You will lead expert guidance on CPS 230 service provider requirements, manage AI risk in supplier arrangements, and report material risks to executive governance committees.

Qualifications

• Extensive experience in operational risk, supplier risk, technology risk and compliance within financial services or a heavily regulated environment.
• Ability to apply risk control frameworks, assurance, issue management and risk-based decision making.
• Proven capability to challenge, advise and communicate with senior stakeholders.

Responsibilities

• Provide independent Line 2 oversight across supplier risk for Technology and Operations.
• Support risk framework development, risk definitions, controls and policy guidance.
• Advise and approve supplier risk activities including risk assessments, controls and incidents.
• Manage AI risk arising from supplier products and services.
• Report material risks and recommendations to senior governance forums and stakeholders.
• Collaborate with Procurement, Legal, Data, Cyber and other risk teams to ensure coordinated risk management.

Skills

Operational risk

Supplier risk

Technology risk

Regulatory compliance

Stakeholder communication

Data analysis

Job description

Senior Manager Supplier Operational Risk and Compliance

Senior Manager, Supplier Operational Risk and Compliance

See yourself in our team

As the Senior Manager, Supplier Operational Risk and Compliance, you will provide independent Line 2 oversight, advice, challenge, review and approvals across supplier risk. The role supports the Third Parties Supplier Risk Steward in the Group-wide stewardship of Third Parties Supplier Risk and provides direct Line 2 supplier risk oversight across Technology and Operations. It also supports the identification and management of emerging supplier risks, including AI risk arising from supplier-provided products and services.

On any given day you will:

• Support the Third Parties Supplier Risk Steward in the Group-wide stewardship and ongoing development of the supplier risk framework, including risk definitions, guidance, key controls, compliance arrangements, risk appetite, thematic insights and emerging risks.
• Provide independent Line 2 advice, review, challenge and approvals over supplier risk activities across Technology and Operations, including risk assessments, controls, issues, incidents, assurance and material change.
• Drive continuous improvement of supplier risk policies, procedures, methodologies, data and tooling, and support consistent interpretation and application of supplier risk requirements.
• Act as a subject matter expert on CPS 230 service provider requirements, supporting the Business to meet regulatory obligations and respond to regulatory and assurance reviews relating to supplier risk.
• Provide Line 2 oversight of AI risk arising from supplier arrangements, including AI-enabled products and services and suppliers’ use of AI in delivering services to the Group.
• Use data, judgement and thematic analysis to identify material and emerging supplier risks, provide clear reporting and recommendations to senior governance forums, and influence practical improvements to risk management.
• Build strong relationships across the Business, Procurement and specialist risk teams, including Model Risk, Responsible AI, Data, Privacy, Cyber Security, Technology, Legal and Compliance, to provide coordinated and effective Line 2 advice.

We are interested in hearing from people with:

• Extensive experience in operational risk, supplier risk, technology risk, compliance within financial services or another highly regulated environment.
• Strong knowledge of risk and control frameworks, assurance, issue management, and risk-based decision-making.
• Strong knowledge of CPS 230 and its application to service provider and supplier risk management.
• Demonstrated ability to provide independent challenge, exercise sound judgement and communicate clear recommendations to senior stakeholders.
• Excellent relationship, influencing, analytical and written communication skills, with the ability to operate effectively in a complex and changing environment.

Highly regarded

• Experience in supplier lifecycle risk, operational resilience, supplier assurance, concentration risk or fourth-party dependencies.
• Experience in AI or model risk, data, privacy, cyber security, cloud risk or assurance of suppliers and services.
• Knowledge of other relevant prudential, regulatory or industry frameworks applicable to supplier, technology, cyber, data or AI risk.
• Relevant professional certifications or qualifications in risk, technology, cyber, data or AI.

At CommBank, we're committed to creating an accessible, inclusive and respectful workplace. If you require support or adjustments, please let us know. We welcome applications from people of all backgrounds and we're particularly committed to making a positive difference for Aboriginal and/or Torres Strait Islander Peoples. For support please contact 1800 989 ***.