Key Role Responsibilities

• Providing risk reporting and analytics capability to uplift risk management practices
• Engaging and managing stakeholders to implement and improve business systems and processes through the use/integration of the risk and compliance framework
• Risk profiling: assisting to identify key risks and design of indicators to monitor, input into Divisional Risk Setting Statements as relevant
• Designing controls: assisting to identify the right key controls to mitigate key risks and obligations applicable to the business
• Providing guidance on risk and control items including Subject Matter Expertise for the following: Risks, Obligations Events, Change, and related Policies; Remediation action plans to address any control design or operating effectiveness gaps; Requisitions on Management attestations, ensuring evidence is consolidated at a Sub-Divisional level; Relevant Risk Management Forums and/or other risk related committees as required
• Management of control environment through design and testing of controls
• Engaging the relevant Enterprise Controls communities for expert assistance as appropriate
• Providing business specific input and context to: Risk deep dive reviews;  Internal Audit reviews; Assurance reports; Action plans for ineffective operational controls
• Uplifting risk management maturity and practices
• Assisting in regulatory responses and regulatory engagement matters
• Driving consistency of effectiveness for Technology Assets assessments performed
• Supporting the Manager and Senior Consultants to ensure the control Technology Asset assessment plans are executed within agreed timeframes
• Support the design, maintenance and / or uplift team processes, tools and methodologies
• Pro-actively identifying, driving and supporting continuous improvement and evolution of other NAB controls assessment processes and toolset
• Participating in Enterprise Controls Communities of Practice

Experience & Skills

• 5+ years’ experience working in risk management/compliance/internal control or external audit or equivalent
• Thorough knowledge of risk management and compliance disciplines
• Excellent verbal, written and interpersonal communication skills, ability to collaborate and network effectively in a team environment
• Internal control/audit techniques
• Strong proficiency in MS Office Skills
• Strong SAS/SQL/Alteryx hands-on experience with proven ability to obtain data from various data source like SQL Server
• Professional certifications like CISA, CISM, ISO2000, ISO27001
• Proven ability to perform in a high performing team
• Practical approach to solving issues with strong commercial acumen
• Some knowledge of relevant industry standards and guidance
• Excellent time management and ability to multi-task and adapt to changing priorities