Ho Divisional Controls Bpb

**Work type**: Permanent Full time
**Location**: VIC- Melbourne CBD

**It’s more than a career at NAB. It’s about more opportunity, more moments to make a difference and more focus on you.**

You make NAB. You get it done for our customers and our communities. You’re laying the foundations for NAB’s future success. Together we’ll grow, excel for our customers, and make this a workplace to be proud of.

It’s a good time to see what more you can find at NAB as **HO Divisional Controls BPB**

**The role**:

- The Head of Divisional Controls is responsible for leading and driving the management of first line risk across B&PB technology division.
- This role is critical in driving and strengthening technology risk management, managing technology controls and improving compliance support to B&PB technology team.
- The role assists B&PB technology management to develop adequate technology controls to identify, assess, quantify and manage the risks in the relevant business.
- The role will work closely with broader risk networks as well as B&PB technology team to deliver on the technology risk initiatives within B&PB technology business.

**Essential capabilities**:

- Risk management and control thought leadership.
- Broad IT background and strategic execution.
- Ability to oversee and provide appropriate advice, guidance and expertise to support business leaders with executing their risk and compliance management accountabilities including impacts as a result of change initiatives and projects
- Thinks broadly within defined strategies and policies to meet business needs.
- Business and operational acumen with ability to understand the implication of unmitigated risks exposures.
- Strong communication skills, technical and business is essential.
- These roles may deliver and manage the operational requirements or outcomes of a team that is integrated across the Enterprise to agreed metrics/objectives.

**Other capabilities**:

- Providing specialist Risk and Compliance Policy and Framework advice and guidance to the business
- Uplift in the Divisional control environment
- Exceptional communication with the ability to engage, build relationships and influence stakeholders at senior levels.
- Development and engagement of direct reports - excellent people leadership.

**Experience**
- 7+ years experience in Financial services.
- 5+ years experience in operational/ technology risk management.
- 5+ years experience in related business technology domain.
- Experience in leading first line technology risk and control function.
- Experience in assurance or audit domain is desirable.
- C-Suite engagement and proven track record of reporting to senior stakeholders including board/ risk committees.
- Regulatory engagement experience and capable of shaping and responding to audit, compliance obligations and engagement requests.
- Broad technology experience and the ability to communicate strategy and technical outcomes.
- Knowledge of relevant industry standards desirable (e.g., ISO 27001, COBIT, NIST, ISO 31000, CPS 234/ CPG 235, SWIFT compliance).
- Comprehensive knowledge of Technology risk, control design and assurance methodologies.
- Extensive risk management and control function integration expertise.
- Proven ability to lead high performing teams
- Practical approach to solving issues with strong commercial acumen.
- Exceptional time management and ability to multi-task and adapt to changing priorities.

**Qualification Requirements**:

- Tertiary qualification in a business-related discipline desirable.
- Post Graduate qualification desirable.
- Relevant Risk and Controls certifications e.g. ISACA (CISA/ CISM/ CRISC / CDPSE) or ISC2 (CISSP) or CCSP certifications desirable.

**Key Accountabilities**:
Reporting to the Executive, DCO Technology. In this role you will be responsible for (leading a Divisional Controls team), to support the B&PB technology business in its execution of risk and compliance management accountabilities in line with DCO technology service catalogue.

**This role is primarily responsible for**:

- Technology risk and regulatory obligation identification, impact assessment and change within the Division.
- Engaging and managing senior stakeholders to implement and improve business systems and processes through the use/integration of the risk and compliance framework.
- Risk profiling: assisting to identify key risks and design of indicators to monitor, input into Divisional Risk Setting Statements as relevant.
- Designing controls: assisting to identify the right key controls to mitigate key risks and obligations applicable to the business.
- Providing specialist Technology and Operational Risk and Compliance Policy and Framework advice and guidance to the business.
- Exceptional communication with the Divisional Leadership Teams and senior stakeholders.
- Development (including supporting competency and training) and engagement of direct reports.
- Providing guidance on risk and