Organization-  

At CommBank, we never lose sight of the role we play in other people’s financial wellbeing. Our focus is to help people and businesses move forward to progress. To make the right financial decisions and achieve their dreams, targets, and aspirations. Regardless of where you work within our organization, your initiative, talent, ideas and energy all contribute to the impact that we can make with our work. Together we can achieve great things. 

Role Title – Chapter Lead - Retail Technology CCO

Location- Bangalore- Manyata tech Park 

Business and team: 

Technology CCO is a Line 1 risk team responsible for supporting CBA in continuing to mature its risk culture and establish and maintain strong risk practices. Retail Technology CCO develops and implements control capabilities aligned to the ever-evolving technology landscape, partnering with Retail Technology Leads, business partners across the Retail Bank, and Line 2 to deliver insights that enable effective decision making across the technology estate.

Impact and Contributions: 

The Chapter Lead, Retail Technology CCO is a people leadership and hands-on practitioner role, responsible for leading and growing a chapter of technology risk and controls professionals, and for the continuous evolution of the control environment aligned to Domain and platform strategic goals and the broader Technology CCO objectives. The chapter supports Retail and Bankwest Technology across the estate, covering cloud, cyber, data and AI-enabled delivery. The role provides guidance and advice to senior leaders on their services and risk profiles to enable balanced decisioning that holds the customer outcome front and foremost, and develops strong relationships with Technology Leaders, Retail Business CCO partners and Line 2. 

Technology CCO is evolving from a manual, point-in-time and reactive control function to one that is AI-enabled, real-time, productised and engineering-led. Over the next 12 to 24 months the role is expected to build the emerging risk and control automation capability within the chapter, extend the Operational Risk craft to cloud-native, platform and AI-era control models, and grow risk practitioners who are engineering and AI-literate.

The role also champions the adoption of Technology CCO’s productised risk capabilities, including RCSA AI, CMRS Automation and ACAA assurance, to shift the chapter from manual, point-in-time assessment toward automated, real-time and data-driven risk insight, and drives safe modernisation and migration practice on major Retail and Bankwest programs such as Cards Modernisation, CommSee 2.0 and Cloud, ensuring controls are engineered in from the outset to enable speed to market delivered safely.

Roles & Responsibilities: 

• Adhere to the Code of Conduct. The Code of Conduct sets the standards of behaviour, actions and decisions we expect from our people.

• Identify the appropriate application and implementation of controls and control methodologies to support the business to achieve better risk and compliance outcomes, and drive continuous improvement across Technology CCO, our partners and business stakeholders to strengthen the end-to-end control environment, removing waste in process and increasing effectiveness and efficiency.

• Lead, coach and develop the chapter of technology risk and controls professionals, lifting craft consistency, proficiency and maturity through skills-led career pathways and on-the-job development, and provide ongoing education to technology leaders and teams as risk and control practices evolve.

• Lead a proactive and progressive risk and control culture, and embed risk and control frameworks into everyday delivery through controls-by-design, clear control ownership and routine evidence, so that risk management happens in the flow of change and run rather than as a periodic overlay.

• Coordinate the Risk and Control Self-Assessment across trigger events for the Retail Technology profile, conduct thematic reviews and root cause analysis for issues and incidents in a timely manner, and ensure data quality is optimised across the risk and control lifecycle and accurately reflected in key systems, using data to focus and prioritise control improvement activity.

Essential Skills:

• Minimum 15+ years’ experience in technology risk and control in banking, financial services or other non-financial services firms, with sound knowledge of Operational and Compliance Risk frameworks, including RCSA, issues and incidents, control assessment and cyber security risk management.

• Risk management and better risk outcomes, applying risk-based judgement within framework, policy and appetite to enable safe, at-pace change, supported by a growth mindset, stakeholder management, critical thinking, the ability to provide constructive feedback and to synthesise information in an environment of white noise and heavy information flow.

• Experience in Cloud, Technology, Cyber and/or AI/data science practitioner roles is preferred.

• Experience with project change and implementation risk advisory, and demonstrated capability in mentoring, coaching and developing others, with a track record of lifting team capability and building succession.

• Matrix management and collaboration across departmental, functional and geographic reporting lines, with the ability to influence senior technology and business stakeholders, manage multiple priorities and apply AI and data literacy, including responsible AI considerations, to risk and control processes. IT risk certifications such as CISM, CISA, CRISC, CGEIT, CDPSE, COBIT, ITIL or CISSP are favorable.

• Familiarity with APRA standards applicable to Technology and Operational risk is favorable.

Education: Bachelor's or Master's degree or equivalent practical experience.