Cyber Defence Risk Manager

4 weeks ago

Sydney, Australia Commonwealth Bank of Australia Full time

Cyber Defence Risk Manager

**See yourself in our team**:
The Technology and Operations (Tech & Ops) Risk team is responsible for providing specialist Operational Risk and Compliance (OR&C) advice and assurance of decisions made across the Technology, Chief Operating Office, and Business Unit divisions.

**Do work that matters**:
You will play a key role within the **Cyber Defence Risk **team as part of the Security Operational Risk function that supports Group Security. You will partner with the Executive Manager Cyber Risk to provide independent Line 2 advice and assurance and actively uplift capability across the Cyber Security SOC and App Security functions.

**Key responsibilities for this role includes**:
**Technical**:

- Provide SME risk management advice to cybersecurity teams aligned to the following cyber risk management domains: Application & Service Protection, Vulnerability Management, Data Security, Cloud Security, Third Party Security, Identity & Access Management, and Cyber Defence.
- Working as part of a team of professional SMEs to provide independent, pragmatic and value adding Operational Risk advice and assurance for technology and cyber risks across the Group.
- Monitoring and reporting of three lines of accountability (3LoA) activities to the Executive Manager, including BAU management of the Risk Management Approach, the Operational Risk Management Framework and Compliance Management Framework in support of CPS 220.
- Contributing to the oversight and monitoring of key technology and cyber risks, controls, issues, incidents, and risk-in-change.
- Supporting the appropriate identification, escalation and reporting of all related technology and cyber risk and compliance matters to the relevant stakeholders, including the relevant NFRCs, your EM/GM and to the Technology and Operations CRO.

**Leadership**:

- Work as part of a cross-skilled team that can support a range of inter-connected risk domains; speaking up and contributing to appropriate Line 2 oversight and challenge.
- Provide ideas for Line 2 risk management and assurance activities, data analytics and stakeholder reporting; contribute to a culture of learning and collaboration.
- Role model behaviours that are consistent with CBA values expectations and leadership principles; provide a safe workplace for all team members, customers and visitors.
- Develop and maintain partnerships with stakeholders; become a trusted advisor using commercial acumen, practical recommendations; and assist the business to understand where prioritised focus on key risks and compliance matters is required.

**We're interested in hearing from people who have**:

- Cyber Security experience required with sound knowledge of applicable industry standards, frameworks and regulations (e.g. CPS234, NIST, ISO27001, Information Security Manual, Essential 8, OWASP, MITRE).
- Preference for information security certification (e.g. CISM, CRISC, CISSP, GSEC, CompTIA, Security+, CEH).
- Background in Operational Risk and Compliance with technology and cyber risk management specialties within the Financial Services industry highly regarded.
- High quality written and verbal communication skills, report writing, evidence gathering and data analysis capabilities.
- Stakeholder and influencing skills with the ability to proactively engage Line 1 teams and engender trust with pragmatic, commercially balanced risk advice.
- A curious and humble mindset, understanding of external trends and changes, interest in continuous learning, to build risk management best practice.

**Your Career**:
If you live the values and demonstrate the people capabilities we can offer great opportunities. Whether you want to move across the organisation or up into a leadership role, the way you live the values and demonstrate the people capabilities are key. Use the capabilities required for this role as a guide to the critical skills and behaviours you need for your next move.

We're aware of some accessibility issues on this site, particularly for screen reader users. We want to make finding your dream job as easy as possible, so if you require additional support please contact HR Direct on 1800 989 696.

Advertising End Date: 17/11/2024

Job ID REQ218629

  • Cyber Defence Risk Expert

    2 days ago

    Sydney, New South Wales, Australia eFinancialCareers Ltd. Full time

    Cyber Defence Risk ExpertWe are seeking an experienced Cyber Defence Risk Manager to join our eFinancialCareers Ltd. team. As a key member of the Security Operational Risk function, you will play a crucial role in providing independent Line 2 advice and assurance to support Group Security.Key Responsibilities:Provide SME risk management advice to...

  • Cyber Defence Risk Strategist

    7 days ago

    Council of the City of Sydney, Australia Commonwealth Bank Full time

    Job Title: Cyber Defence SpecialistWe are seeking an experienced Cyber Defence specialist to join our Technology and Operations (Tech & Ops) Risk team.This role is ideal for a Security Engineer, Threat Analyst, or Incident Responder looking to utilise their expertise to guide technical teams rather than engage in hands-on analysis or incident response.Key...

  • Cyber Defence Risk Lead

    4 weeks ago

    Sydney, Australia Commonwealth Bank Full time

    **Cyber Defence Risk Lead** **See yourself in our team**: The Technology and Operations (Tech & Ops) Risk team is responsible for providing specialist Operational Risk and Compliance (OR&C) advice and assurance of decisions made across the Technology, Chief Operating Office, and Business Unit divisions. **Do work that matters**: The purpose of this role is...

  • Cyber Defence Risk Lead

    13 hours ago

    Council Of The City Of Sydney, Australia Commonwealth Bank Full time

    Commonwealth Bank Comm Bank offers personal banking, business solutions, institutional banking, company information, and more.Are you an experienced Cyber Defence specialist with a deep understanding of the intricacies of cybersecurity operations? We are looking for someone who excels in grasping the subtleties of cyber risk management, especially in the...

  • Deloitte Cyber Vendor Risk Professional

    2 days ago

    Sydney, New South Wales, Australia Cyber Crime Full time

    Job Description:">We are seeking a seasoned cybersecurity professional to join our team as a vendor cyber risk manager. In this role, you will be responsible for leading our vendor cyber risk management program, ensuring the security and compliance of our third-party vendors.Key Responsibilities:">Cybersecurity Risk Assessment – Conduct thorough risk...

  • Head of Cyber Risk

    2 weeks ago

    Sydney, Australia Westpac Banking Corporation Full time

    Head of Cyber Risk - Permanent - Sydney - Role sits in Risk Division / 2nd Line of Defence Function **How will I help?** As the Head of Cyber Risk, reporting to the Chief Risk Officer for Technology, you will join the Risk Division in a 2nd Line of Defence function and set, own, advise and report on the Group-wide approach to managing Cyber Risk. You will...

  • Head of Cyber Risk

    3 weeks ago

    Sydney, Australia Westpac Full time

    Permanent - SydneyRole sits in Risk Division / 2nd Line of Defence Function **How will I help?** As the Head of Cyber Risk, reporting to the Chief Risk Officer for Technology, you will join the Risk Division in a 2 nd Line of Defence function and set, own, advise and report on the Group-wide approach to managing Cyber Risk. You will have responsibility for...

  • Manager Cyber Risk

    3 weeks ago

    Sydney, Australia Commonwealth Bank of Australia Full time

    Manager Cyber Risk **See yourself in our team**: The Technology and Operations (Tech & Ops) Risk team is responsible for providing specialist Operational Risk and Compliance (OR&C) advice and assurance of decisions made across the Technology, Chief Operating Office, and Business Unit divisions. **Do work that matters**: The Manager Cyber Risk plays and...

  • Cyber Risk Management Director

    8 hours ago

    Council Of The City Of Sydney, Australia Commonwealth Bank Full time

    Job DescriptionWe are seeking a seasoned Cyber Defence specialist to lead our Cyber Risk team in the Technology and Operations (Tech & Ops) Risk division.Key ResponsibilitiesCollaborate with and provide SME risk management advice to crews aligned to cyber domains that mainly cover: Security Engineering, Vulnerability Assessment, Cyber Attack (Penetration...

  • Manager Cyber Risk

    3 weeks ago

    Sydney, Australia Commonwealth Bank Full time

    **See yourself in our team**: The Technology and Operations (Tech & Ops) Risk team is responsible for providing specialist Operational Risk and Compliance (OR&C) advice and assurance of decisions made across the Technology, Chief Operating Office, and Business Unit divisions. **Do work that matters**: The Manager Cyber Risk plays and essential role within...

  • Defence Compliance and Risk Manager

    2 days ago

    Sydney, New South Wales, Australia Compliance & Risk Management Recruitment Full time

    Job DescriptionThis is a senior leadership opportunity within a defence organisation, ensuring compliance, safety, and risk management across multiple contracts.Key ResponsibilitiesManage and maintain quality management systems (ISO 9001, ISO 45001)Oversee work health and safety management systems (WHSMS)Required Skills and QualificationsFormal...

  • Cyber Security Lead

    3 weeks ago

    Sydney, Australia Cleared ICT Full time

    Location: - Sydney - Sectors: - Cyber Security - Employment type: - Permanent - Salary: - Negotiable - Contact name: - Danny Fleming- Job reference: - BBBH592_1656481653 - Published: - about 6 hours ago - Startdate: - ASAP Cleared are looking to speak to experienced Cyber Security professionals who are searching for their next permanent opportunity...

  • Cyber Risk Manager

    3 weeks ago

    Sydney, Australia Allianz Australia Full time

    **CYBER RISK MANAGER - RISK AND COMPLIANCE MANAGER | SYDNEY, NSW** At Allianz, we’re proud to be one of the world’s leading insurance and asset management brands, with a workforce as diverse as the world around us. We care about our customers, which is why we hire the very best people to further our commitment to securing the future of our customers,...

  • Cyber Security Risk Manager

    4 weeks ago

    Sydney, Australia University of New South Wales Full time

    **Job no**: 527962 **Work type**: full time **Location**: Sydney, NSW **Categories**: Information Technology, Cyber - Employment Type: full time continuing role as a Cyber Security Risk Manager - Excellent salary package including superannuation - Location: UNSW Kensington Campus (Hybrid Working Opportunities) **About UNSW**: UNSW isn’t like other places...

  • Cyber Security Risk Advisor

    1 week ago

    Sydney, Australia University of New South Wales Full time

    **Job no**: 527915 **Work type**: Full Time **Location**: Sydney, NSW **Categories**: Information Technology, Cyber - Employment Type: full time continuing role as a Cyber Security Risk Advisor - Exceptional salary package including generous superannuation - Location: UNSW Kensington Campus (Hybrid Working Opportunities) **About UNSW**: UNSW isn’t like...

  • Cyber Risk Management Leader

    2 days ago

    Sydney, New South Wales, Australia Commonwealth Bank Full time

    Cyber Risk Management LeaderWe are seeking a seasoned professional in the realm of Cyber Risk, equipped with a keen understanding of the complexities surrounding security challenges. In this role, your expertise will be instrumental in guiding technical teams and shaping approaches to mitigate cyber risks.Key responsibilities:Collaborate with and provide SME...

  • Cyber Risk Management Expert

    7 days ago

    Sydney, New South Wales, Australia Aon Full time

    Cyber Risk Management ExpertAon is in the business of better decisions. We shape decisions for the better to protect and enrich the lives of people around the world. As an organization, we are united through trust as one inclusive, diverse team, and we are passionate about helping our colleagues and clients succeed.This role is responsible for setting the...

  • Cyber Security Risk Advisor

    3 weeks ago

    Sydney, Australia University of New South Wales Full time

    **Job no**: 525136 **Work type**: full time **Location**: Sydney, NSW **Categories**: Information Technology, Cyber - Employment: Full time (35 hours per week) - Continuing role as a Cyber Security Risk Advisor - Remuneration: Excellent salary package including leave loading and generous superannuation - Location: Based in Kensington, Sydney (hybrid...

  • Manager, Cyber Risk

    5 days ago

    Sydney, Australia Westpac Group Full time

    12-month secondment or Fixed term opportunity - Sydney based hybrid working role2nd Line Risk Role to Lead quality data analysis and insights **How will I help?** You will join the Chief Risk Officer Technology team and report to the Head of Cyber Risk to support the provision of quality data analysis and insight over the Group's important management of...

  • Cyber Defence Analyst

    20 hours ago

    Council of the City of Sydney, Australia Commonwealth Bank Full time

    Responsibilities and RequirementsIn this dynamic role, you will be responsible for triaging vulnerabilities and high-risk threat actor activity, verifying their criticality, and feeding the results back into the Threat Hunting prioritization process to ensure CBA's protection against those threats.Additionally, you will collate performance metrics to track...