Senior Process Risk And Controls Manager

Bupa; Melbourne; Hybrid; AUD 120,000 - 180,000; Full time

Benefits offered by this job

Viva wellbeing program

Flexible working

Equal opportunity employer

Job summary

Bupa seeks a Senior Process, Risk & Controls Manager to lead the design and embedding of a future-state control environment across operations. You will partner across risk, technology, architecture and claims integrity to shift from manual to automated controls, strengthening compliance and resilience for members.

In this 12-month opportunity based in Melbourne or Adelaide, you’ll drive the control automation roadmap, ensure design principles are followed, and deliver measurable reductions in

Qualifications

• Extensive experience in operational risk, controls or governance within large transformation environments.
• Proven design and embedding of future-state operational control environments with automated controls.
• Strong understanding of risk-based governance and control frameworks.
• Experience partnering with technology, architecture and business stakeholders to drive outcomes.
• Knowledge of APRA standards a plus and ability to translate into design.

Responsibilities

• Lead end-to-end control design across future-state processes in capability modernisation.
• Embed control-by-design principles into operating models and process redesign.
• Drive AI-enabled and data-driven monitoring to identify emerging risks.
• Develop and govern automated control requirements for system configurations.
• Provide risk and control leadership across program workstreams and governance forums.
• Partner with Technology, Architecture and Delivery to embed automated controls into workflows.

Skills

Operational risk

Controls design

GRC governance

Stakeholder management

Automation awareness

Education

Bachelor's degree in related field

Tertiary qualification in Risk/IT governance

Tools

BPMN

Data analytics tools

Cloud platforms

Job description

Shape Bupa’s future control environment, not just oversee it. Lead risk-by-design transformation, embedding automated controls and strengthening operational resilience from the outset.

12 Month Opportunity

Location: Melbourne or Adelaide

At Bupa, purpose meets possible. Join us and help shape a future where healthcare is more connected, more personal and more human.

We’re a global healthcare leader trusted by millions and committed to helping people to live longer, healthier, happier lives and making a better world. Healthcare is changing, and so are we. We’re investing in more clinics, better systems and smarter, more connected ways to help our customers.

As we continue to expand our services and invest in innovation, you’ll help create a healthcare system that meets people where they are, responds to what they need and leaves them better than before.

Here, your work has purpose, your voice matters and your future is full of possibility.

Just imagine the impact you could make.

The Purpose of This Job

Help shape a more resilient, efficient and member-centric operating model as our Senior Process, Risk & Controls Manager. As part of the Capability Modernisation Program, you’ll lead the design, implementation and embedding of the future-state operational control environment, bringing processes, technology and controls together from the outset.

Partnering with teams across operations, claims integrity, technology, architecture, cyber, risk and compliance, you’ll embed risk and control considerations into end-to-end process and platform design. You’ll drive the shift from manual, reactive and detective controls towards automated, preventative and continuously monitored controls, wherever appropriate.

You’ll define the risk and control elements of the target operating model, establish control design principles and standards, and ensure controls are documented within future-state process maps. Your remit will also include developing the control automation roadmap, providing design assurance, assessing control readiness for go-live, delivering operational readiness control sign-off and reviewing control effectiveness after implementation.

Success means reducing reliance on manual controls, strengthening regulatory compliance and operational resilience, and embedding effective automated controls within the new platform. Above all, your work will help reduce operational risk and deliver better outcomes for members.

What You'll Be Responsible For

Future-State Process & Control Design

• Lead the design of end-to-end controls and improve control effectiveness in the future state operational processes across all health insurance capabilities in Capability Modernisation.
• Embed “control by design” principles into future-state operating models.
• Ensure risks and controls are considered during process redesign rather than after design completion.
• Ensure segregation of duties is embedded into future-state processes.

AI and Intelligent Automation

• Identify opportunities to embed AI-enabled controls
• Design data driven monitoring to identify emerging operational risks before customer impacts occur

Risk & Control Transformation

• Develop the Capability Modernisation Program target state control strategy
• Design the target operational control framework for the new platform.
• Transition from manual detective controls to automated preventative controls wherever feasible.
• Eliminate redundant and duplicate controls inherited from legacy platforms.
• Define automated control requirements for system configuration.
• Design continuous monitoring and exception-based controls.
• Ensure controls are measurable, testable and sustainable.

Program Governance

• Provide risk and control leadership across all program workstreams.
• Review solution designs and architecture from a risk and controls perspective.
• Contribute to design governance forums.
• Ensure risks, assumptions, issues and decisions are appropriately documented.
• Escalate material design risks to Program Steering Committees.

Technology Partnership

• Partner with Technology, Enterprise Architecture and Delivery teams to embed automated, risk-based controls into system workflows, approvals, reconciliations, validations and payment processes.
• Strengthen identity and access management, audit logging, traceability and exception management.
• Improve data quality controls and enable continuous monitoring across key operational processes.

Regulatory Compliance, Control Assurance & Stakeholder Leadership

• Ensure future-state processes support APRA prudential standards, privacy and private health insurance legislation, applicable AML obligations, Bupa’s internal risk framework, operational risk appetite and Internal Audit expectations, balancing compliance with member experience and operational efficiency.
• Develop the control implementation roadmap, standards and design principles, including automated controls, monitoring and evidence management; review design documentation and oversee design effectiveness assessments to confirm control completeness, establish operating effectiveness testing strategies before go-live and oversee testing after implementation to support operational readiness and ongoing assurance.
• Build strong partnerships across Operations, Claims Integrity, Finance, Technology, Architecture, Cyber Security, Enterprise Risk, Compliance, Internal Audit, delivery partners and vendors, acting as a trusted advisor and influencing shared ownership of operational risk and controls throughout the transformation.
• Champion a control-by-design mindset and modern risk practices: simplify legacy processes before automating, standardise before customising, design once and reuse, and embed preventative controls wherever appropriate. Promote innovation through automation and AI-enabled controls, continuous monitoring through data and analytics, and compliance as a by-product of good process design.

What You’ll Need To Make It Possible

• Extensive experience in operational risk, controls or governance within financial services, health insurance or large-scale transformation environments.
• Demonstrated experience designing and embedding future-state operational control environments, including automated controls within digital platforms.
• Strong understanding of operational process design, control frameworks and risk-based governance.
• Experience partnering with technology, architecture and business stakeholders to drive outcomes across complex programs.
• Knowledge of relevant APRA prudential standards, including CPS 230 and CPS 234.
• Proven stakeholder management capability across senior and cross-functional groups.

Preferred Qualifications:

• Tertiary qualifications in Business, Commerce, Risk, Information Systems or a related discipline.
• Relevant risk, governance, accounting or process improvement qualifications desirable, such as IRM, GRC, CRISC, RIMS, RMIA, CPA, Chartered Accountant or Lean Six Sigma.
• Experience with BPMN or process modelling tools desirable.

Why You’ll Love It?

At Bupa, our purpose is to help people live longer, healthier, happier lives and make a better world, and we know this starts with delivering our purpose for our people.

Our wellbeing program Viva has been designed to help you to live a healthy and happy life. It includes access to health & general insurance discounts, information and education sessions, and preventative healthcare screening such as annual health assessments and skin checks. Through Viva you have access to a range of benefits that will help you to maintain your physical, mental, social, digital, environmental and financial wellbeing. As well as a competitive salary, a range of Bupa benefits and flexible working, you’ll be challenged and encouraged to innovate.

At Bupa your wellbeing, identity, and personal story are respected and valued. We are continuing to build teams that reflect the diversity of the communities we serve. Bupa is committed to providing equal opportunities and fostering a workplace and environment that is free of discrimination, bullying and harassment.

We actively encourage applicants from all backgrounds and experiences, including Aboriginal and Torres Strait Islander peoples, veterans, people with disabilities, and LGBTQIA+ applicants.

We are dedicated to removing barriers to participation. If you need any reasonable adjustments during the recruitment process, or if you’d like to discuss how this role can be flexible for you, please let us know so we can support your participation on an equitable basis.