Do work that matters:

The Group Supplier Risks and Controls team is a first line of accountability function who are a group of trusted and skilled risk management experts empowering our business. The purpose of our team is to enable our business to be safe, sound and secure underpinned by strong risk management.

The Group Supplier Risks and Controls team works in partnership with key stakeholders to deliver safe, sound and secure risk outcomes with:

• Risk management framework and tools

• Risk expertise and coaching

• Controls that are efficient, effective, sustainable and automated

• A greater preventative focus rather than detective

• Risk processes that are simple to understand and apply

This role is to support the supplier risk agenda at CommBank, primarily through the execution of supplier risk assessments and providing quality risk advise to the business. The contribution of this role will allow the Group to make risk-based decisions with agility to improve the Group’s overall supplier risk exposure.

As a Manager Supplier Risk, responsibilities will include a combination of the below:

• Compliance with the Group’s Supplier Lifecycle policy and procedures.

• Acting as a trusted advisor to the business on Supplier Risk management.

• Execution of risk and controls testing and reporting for new and existing supplier arrangements, including outsourcing /offshoring.

• Provision of risk advise relating to supplier sourcing, contracts, controls and performance.

• Support the management of supplier operational issues and incidents.

• Participate in supplier governance meetings as required;

• Develop and maintain accurate supplier profiles.

• Management of compliance with applicable regulatory obligations relating to the use of suppliers; and

• Providing direct support to Group Supplier Risk and Controls leadership in managing a portfolio.

We’re interested in hearing from people who have:

• Relevant experience in the Financial Services industry in Risk & Compliance, Audit and/or Consultancy.

• Preferably experienced in operational, technology or supplier risk management.

• Sound understanding of Outsourcing/Offshoring regulations

• Sound understanding of information security management, Privacy, IT service continuity, IT disaster recovery, business continuity management and third party control assurance.

• Excellent communication skills, written and verbal, confidence in dealing with senior stakeholders.

• Knowledge of current applicable regulatory requirements relevant to regulated financial institutions. Familiarity with APRA standards (not limited to CPS220, 230, 231, 232).

• Certification like CISA, CRISC, CGEIT, CISM, COBIT or ISO2700x would be preferred.

Advertising End Date: 18/10/2024