Manager Cyber Risk

2 months ago


Sydney, Australia Commonwealth Bank of Australia Full time

Manager Cyber Risk

**See yourself in our team**:
The Technology and Operations (Tech & Ops) Risk team is responsible for providing specialist Operational Risk and Compliance (OR&C) advice and assurance of decisions made across the Technology, Chief Operating Office, and Business Unit divisions.

**Do work that matters**:
The Manager Cyber Risk plays and essential role within the **Security Operational Risk **team supporting the Group Security division. Work with the Executive Manager Cyber Risk to provide independent Line 2 advice and assurance over Line 1 implementation of the Risk Management Approach, the Operational Risk and Compliance Management Framework and actively uplift risk capability across the Cyber Security functions.

**Key responsibilities for this role include**:
**Technical**:

- Provide SME risk management advice to crews aligned to the following cyber domains: Application & Service Protection, Vulnerability Management, Data Security, Cloud Security, Third Party Security, Identity & Access Management, and Cyber Defence.
- Working as part of a team of professional SMEs to provide independent, pragmatic and value adding Operational Risk advice and assurance for technology and cyber risks across the Group.
- Monitoring and reporting of three lines of accountability (3LoA) activities to the Executive Manager, including BAU management of the Risk Management Approach, the Operational Risk Management Framework and Compliance Management Framework in support of CPS 220.
- Contributing to the oversight and monitoring of key technology and cyber risks, controls, issues, incidents, and risk-in-change.
- Supporting the appropriate identification, escalation and reporting of all related technology and cyber risk and compliance matters to the relevant stakeholders, including the relevant NFRCs, your EM/GM and to the Technology and Operations CRO.

**Leadership**:

- Work as part of a cross-skilled team that can support a range of inter-connected risk domains; speaking up and contributing to appropriate Line 2 oversight and challenge.
- Provide ideas for Line 2 risk management and assurance activities, data analytics and stakeholder reporting; contribute to a culture of learning and collaboration.
- Role model behaviours that are consistent with CBA values expectations and leadership principles; provide a safe workplace for all team members, customers and visitors.
- Develop and maintain partnerships with stakeholders; become a trusted advisor using commercial acumen, practical recommendations; and assist the business to understand where prioritised focus on key risks and compliance matters is required.

**We're interested in hearing from people who have**:

- Experience required in cyber security with sound knowledge of applicable industry standards, frameworks and regulations (e.g. CPS234, NIST, ISO27001, Information Security Manual, Essential 8, OWASP, MITRE).
- Preference for information security certification (e.g. CISM, CRISC, CISSP).
- Background in Operational Risk and Compliance with technology and cyber risk management specialties within the Financial Services industry highly regarded.
- High quality written and verbal communication skills, report writing, evidence gathering and data analysis capabilities.
- Stakeholder and influencing skills with the ability to proactively engage Line 1 teams and engender trust with pragmatic, commercially balanced risk advice.
- A curious and humble mindset, understanding of external trends and changes, interest in continuous learning, to build risk management best practice.

**Your Career**:
If you live the values and demonstrate the people capabilities we can offer great opportunities. Whether you want to move across the organisation or up into a leadership role, the way you live the values and demonstrate the people capabilities are key. Use the capabilities required for this role as a guide to the critical skills and behaviours you need for your next move.

We're aware of some accessibility issues on this site, particularly for screen reader users. We want to make finding your dream job as easy as possible, so if you require additional support please contact HR Direct on 1800 989 696.

Advertising End Date: 25/09/2024

Job ID REQ218629



  • Sydney, New South Wales, Australia XM Cyber Full time

    About the RoleXM Cyber is a leading provider of continuous threat and exposure management solutions. We are seeking an experienced Channel Manager to join our team in ANZ.The successful candidate will be responsible for building and managing a channel of enterprise cyber security solutions. This will involve working closely with our sales teams and channel...


  • Sydney, New South Wales, Australia Group Risk Full time

    Job SummaryThe Star Entertainment Group is seeking a highly skilled Head of Technology Risk to join our team. As a key member of our Group Risk function, you will be responsible for providing independent oversight and review of our technology risk profile.About the RoleIn this exciting new position, you will have the opportunity to shape the success of our...

  • Manager Cyber Risk

    2 months ago


    Sydney, Australia Commonwealth Bank Full time

    **See yourself in our team**: The Technology and Operations (Tech & Ops) Risk team is responsible for providing specialist Operational Risk and Compliance (OR&C) advice and assurance of decisions made across the Technology, Chief Operating Office, and Business Unit divisions. **Do work that matters**: The Manager Cyber Risk plays and essential role within...

  • Cyber Risk Manager

    5 months ago


    Sydney, Australia Allianz Australia Full time

    **CYBER RISK MANAGER - RISK AND COMPLIANCE MANAGER | SYDNEY, NSW** At Allianz, we’re proud to be one of the world’s leading insurance and asset management brands, with a workforce as diverse as the world around us. We care about our customers, which is why we hire the very best people to further our commitment to securing the future of our customers,...


  • Sydney, Australia University of New South Wales Full time

    **Job no**: 527962 **Work type**: full time **Location**: Sydney, NSW **Categories**: Information Technology, Cyber - Employment Type: full time continuing role as a Cyber Security Risk Manager - Excellent salary package including superannuation - Location: UNSW Kensington Campus (Hybrid Working Opportunities) **About UNSW**: UNSW isn’t like other places...


  • Sydney, New South Wales, Australia TAL Full time

    Senior Cyber Risk Manager Job DescriptionThe Senior Cyber Risk Manager will be responsible for managing and mitigating cyber risks associated with third-party technology vendors. This role will work closely with the Technology and Cyber Risk function to ensure that all third-party vendors meet the required security and risk management standards.Key...

  • Cyber Risk Manager

    3 weeks ago


    Sydney, New South Wales, Australia Aon Full time

    Cyber Insurance Role OverviewAon is seeking an insurance executive or consultative broker to join its high-performing Cyber Solutions broking business as a Client Manager with a focus on Cyber risk.Key ResponsibilitiesWorking closely with the Cyber Insurance and Consulting team, Head of Cyber, and other key stakeholders to deliver best-in-class Cyber...

  • Manager, Cyber Risk

    5 months ago


    Sydney, Australia Clyde&Co Full time

    Job Title - Manager, Cyber Risk - Job Location - Sydney - Job Type - Business Services - Country/Territory - Australia - Region - Asia Pacific - Description **About the team** Clyde & Co is an international law firm, with the largest, dedicated cyber incident response practice in Australia. The team advises small, medium, and large organisations...


  • Sydney, Australia Commonwealth Bank of Australia Full time

    Cyber Defence Risk Manager **See yourself in our team**: The Technology and Operations (Tech & Ops) Risk team is responsible for providing specialist Operational Risk and Compliance (OR&C) advice and assurance of decisions made across the Technology, Chief Operating Office, and Business Unit divisions. **Do work that matters**: You will play a key role...

  • Head of Cyber Risk

    1 month ago


    Sydney, Australia Westpac Banking Corporation Full time

    Head of Cyber Risk - Permanent - Sydney - Role sits in Risk Division / 2nd Line of Defence Function **How will I help?** As the Head of Cyber Risk, reporting to the Chief Risk Officer for Technology, you will join the Risk Division in a 2nd Line of Defence function and set, own, advise and report on the Group-wide approach to managing Cyber Risk. You will...

  • Head of Cyber Risk

    1 month ago


    Sydney, Australia Westpac Full time

    Permanent - SydneyRole sits in Risk Division / 2nd Line of Defence Function **How will I help?** As the Head of Cyber Risk, reporting to the Chief Risk Officer for Technology, you will join the Risk Division in a 2 nd Line of Defence function and set, own, advise and report on the Group-wide approach to managing Cyber Risk. You will have responsibility for...


  • Sydney, New South Wales, Australia Qantas Full time

    Cyber and Technology Risk ManagerThe Qantas Group is seeking a highly skilled Cyber and Technology Risk Manager to join our team. As a key member of our risk management team, you will be responsible for managing and delivering strategic risk management and cyber governance activities across the Qantas Group.Key responsibilities include:Managing the pipeline...

  • Cyber Risk Specialist

    1 month ago


    Sydney, New South Wales, Australia Marsh Pty Ltd Full time

    About the RoleMars is seeking a highly skilled Cyber Risk Specialist to join their team in Sydney. As a key member of the Pacific Cyber Practice, you will be responsible for growing the Cyber portfolio through new business strategies and goals.Key ResponsibilitiesDevelop and implement effective risk management strategies to mitigate cyber threatsCollaborate...


  • Sydney, New South Wales, Australia Tal Services Limited Full time

    Established in Australia, TAL Services Limited is a leader in the financial services industry. Our company description reveals our commitment to developing leadership, promoting diversity, and retaining great talent.Welcome to TAL. We want to grow with you. Achieve with you. And support you to do your best work. That's why we're focused on developing...


  • Sydney, New South Wales, Australia Commonwealth Bank of Australia Full time

    Role SummaryWe are seeking a highly skilled Cyber Security Risk Management Leader to join our team. As a key member of our Operational Risk and Compliance team, you will be responsible for providing expert advice and guidance on cyber security risk management across the organisation.Key Responsibilities:Provide SME risk management advice to crews aligned to...


  • Sydney, New South Wales, Australia Qantas Full time

    About the RoleThe Group Cyber and Technology Risk Manager will play a key role in managing and delivering strategic risk management and cyber governance activities across the Qantas Group. This includes managing the pipeline of risk, assurance and compliance activities, ensuring that mitigation actions are addressed according to priority, and any escalations...


  • Sydney, New South Wales, Australia University of New South Wales Full time

    Job SummaryThe University of New South Wales is seeking a highly skilled Cyber Security Risk Manager to join our team. The successful candidate will be responsible for providing strategic leadership in developing and continuously improving the University's cyber security risk management practices.Key ResponsibilitiesDevelop and Implement Risk Management...


  • Sydney, New South Wales, Australia Commonwealth Bank of Australia Full time

    About the Role:We are seeking a highly skilled Cyber Defence Risk Management Specialist to join our team at the Commonwealth Bank of Australia. As a key member of our Cyber Risk team, you will be responsible for providing independent risk management advice and assurance to support the bank's technology and cyber risks.Key Responsibilities:Provide SME risk...


  • Sydney, New South Wales, Australia Commonwealth Bank of Australia Full time

    Cyber Defence Risk ManagerJob Description:In this role, you will be part of the Cyber Defence Risk team within the Security Operational Risk function that supports Group Security. Your primary responsibility will be to provide independent Line 2 advice and assurance, as well as actively uplifting capability across the Cyber Security SOC and App Security...


  • Sydney, New South Wales, Australia Commonwealth Bank of Australia Full time

    Are you a seasoned security professional with expertise in cyber defence and risk management? We're seeking an exceptional individual to join our Cyber Defence Risk team as part of the Security Operational Risk function that supports Group Security.Key responsibilities:Provide independent Line 2 advice and assurance on cybersecurity risks across various...