Senior Manager, Supplier Operational Risk and Compliance

See yourself in our team

As the Senior Manager, Supplier Operational Risk and Compliance, you will provide independent Line 2 oversight, advice, challenge, review and approvals across supplier risk. The role supports the Third Parties Supplier Risk Steward in the Group-wide stewardship of Third Parties Supplier Risk and provides direct Line 2 supplier risk oversight across Technology and Operations. It also supports the identification and management of emerging supplier risks, including AI risk arising from supplier-provided products and services.

On any given day you will:

• Support the Third Parties Supplier Risk Steward in the Group-wide stewardship and ongoing development of the supplier risk framework, including risk definitions, guidance, key controls, compliance arrangements, risk appetite, thematic insights and emerging risks.

• Provide independent Line 2 advice, review, challenge and approvals over supplier risk activities across Technology and Operations, including risk assessments, controls, issues, incidents, assurance and material change.

• Drive continuous improvement of supplier risk policies, procedures, methodologies, data and tooling, and support consistent interpretation and application of supplier risk requirements.

• Act as a subject matter expert on CPS 230 service provider requirements, supporting the Business to meet regulatory obligations and respond to regulatory and assurance reviews relating to supplier risk.

• Provide Line 2 oversight of AI risk arising from supplier arrangements, including AI-enabled products and services and suppliers’ use of AI in delivering services to the Group.

• Use data, judgement and thematic analysis to identify material and emerging supplier risks, provide clear reporting and recommendations to senior governance forums, and influence practical improvements to risk management.

• Build strong relationships across the Business, Procurement and specialist risk teams, including Model Risk, Responsible AI, Data, Privacy, Cyber Security, Technology, Legal and Compliance, to provide coordinated and effective Line 2 advice.

We are interested in hearing from people with:

Essential

• Extensive experience in operational risk, supplier risk, technology risk, compliance within financial services or another highly regulated environment.

• Strong knowledge of risk and control frameworks, assurance, issue management, and risk-based decision-making.

• Strong knowledge of CPS 230 and its application to service provider and supplier risk management.

• Demonstrated ability to provide independent challenge, exercise sound judgement and communicate clear recommendations to senior stakeholders.

• Excellent relationship, influencing, analytical and written communication skills, with the ability to operate effectively in a complex and changing environment.

Highly regarded

• Experience in supplier lifecycle risk, operational resilience, supplier assurance, concentration risk or fourth-party dependencies.
• Experience in AI or model risk, data, privacy, cyber security, cloud risk or assurance of suppliers and services.
• Knowledge of other relevant prudential, regulatory or industry frameworks applicable to supplier, technology, cyber, data or AI risk.
• Relevant professional certifications or qualifications in risk, technology, cyber, data or AI.

If this sounds like the role for you then we would love to hear from you. Apply today!

At CommBank, we're committed to creating an accessible, inclusive and respectful workplace. If you require support or adjustments, please let us know. We welcome applications from people of all backgrounds and we're particularly committed to making a positive difference for Aboriginal and/or Torres Strait Islander Peoples. For support please contact 1800 989 696.