Senior Manager Supplier Operational Risk and Compliance

• Provide independent Line 2 advice, review, challenge and approvals over supplier risk activities across Technology and Operations, including risk assessments, controls, issues, incidents, assurance and material change.

• Drive continuous improvement of supplier risk policies, procedures, methodologies, data and tooling, and support consistent interpretation and application of supplier risk requirements.

• Act as a subject matter expert on CPS 230 service provider requirements, supporting the Business to meet regulatory obligations and respond to regulatory and assurance reviews relating to supplier risk.

• Provide Line 2 oversight of AI risk arising from supplier arrangements, including AI-enabled products and services and suppliers’ use of AI in delivering services to the Group.

• Use data, judgement and thematic analysis to identify material and emerging supplier risks, provide clear reporting and recommendations to senior governance forums, and influence practical improvements to risk management.

• Build strong relationships across the Business, Procurement and specialist risk teams, including Model Risk, Responsible AI, Data, Privacy, Cyber Security, Technology, Legal and Compliance, to provide coordinated and effective Line 2 advice.

We are interested in hearing from people with:

Essential

• Extensive experience in operational risk, supplier risk, technology risk, compliance within financial services or another highly regulated environment.

• Strong knowledge of risk and control frameworks, assurance, issue management, and risk-based decision-making.

• Strong knowledge of CPS 230 and its application to service provider and supplier risk management.

• Demonstrated ability to provide independent challenge, exercise sound judgement and communicate clear recommendations to senior stakeholders.

• Excellent relationship, influencing, analytical and written communication skills, with the ability to operate effectively in a complex and changing environment.

Highly regarded

• Experience in supplier lifecycle risk, operational resilience, supplier assurance, concentration risk or fourth-party dependencies.
• Experience in AI or model risk, data, privacy, cyber security, cloud risk or assurance of suppliers and services.
• Knowledge of other relevant prudential, regulatory or industry frameworks applicable to supplier, technology, cyber, data or AI risk.
• Relevant professional certifications or qualifications in risk, technology, cyber, data or AI.

If this sounds like the role for you then we would love to hear from you. Apply today!

At CommBank, we're committed to creating an accessible, inclusive and respectful workplace. If you require support or adjustments, please let us know. We welcome applications from people of all backgrounds and we're particularly committed to making a positive difference for Aboriginal and/or Torres Strait Islander Peoples. For support please contact 1800 989 696.

If you're already part of the Commonwealth Bank Group (including Bankwest, x15ventures), you'll need to apply through Sidekick to submit a valid application. We’re keen to support you with the next step in your career.

We're aware of some accessibility issues on this site, particularly for screen reader users. We want to make finding your dream job as easy as possible, so if you require additional support please contact HR Direct on 1800 989 696.

Advertising End Date: 20/10/2026