Product Owner Capability Build Auth

**Technical Product Owner - Authentication and Access Tech**
- **We're**embarking on an exciting transformation with a key focus on modernising data, cloud, and API product solutions.
- **You have**knowledge that spans across product management, cloud, and API transformation services.
- **Together we**will build tomorrow’s bank today, using world-leading [HT1] technologies.

**Do work that matters**:
We're building tomorrow’s bank today. This means we need creative and diverse experts to help us redefine what customers expect from a bank. Envisioning new technologies that are still waiting to be invented and reimagining products that support our customers and help build Australia’s future economy.

CommBank is recognised as leading the industry in IT and operations with its world-class platforms and processes, agile IT infrastructure. Our technology teams are the brains behind Australia’s number one banking app, Netbank, Cardless Cash, Comm Sec Pocket, and Spend Tracker. We want you to join in on that journey.

**See yourself in our team**:
As a Senior Technical Product Owner for Authentication Platforms, you will lead the strategic direction, delivery, and continuous improvement of workforce identity solutions across the enterprise. You will be responsible for driving the roadmap, governance, and risk posture of authentication services, ensuring secure, scalable, and user-friendly access for employees, contractors, and partners.

You will work closely with engineering, cybersecurity, compliance, and business stakeholders to deliver robust identity solutions using platforms like **Ping Identity**and **Microsoft Entra ID (formerly Azure AD)**.

**Your impact and contribution**:
**Product Ownership & Strategy**
- Define and own the product vision and roadmap for workforce authentication platforms.
- Align product strategy with enterprise security goals, compliance requirements, and user experience.
- Prioritize features and enhancements based on business value, risk, and technical feasibility.

**Platform Delivery & Execution**
- Lead cross-functional teams to deliver authentication capabilities including SSO, MFA, passwordless, and conditional access.
- Manage vendor relationships and platform upgrades (e.g., Ping Identity, MS Entra).

**Controls & Governance**
- Implement and maintain identity governance policies and controls.
- Ensure compliance with internal standards and external regulations (e.g., ISO 27001, NIST, SOC2).
- Collaborate with audit and risk teams to address findings and improve control maturity.

**Risk Management**
- Identify and mitigate risks related to identity and access management.
- Support threat modeling and risk assessments for authentication flows.
- Drive adoption of secure authentication patterns across the organization.

**Stakeholder Engagement**
- Act as the primary point of contact for authentication platform capabilities.
- Communicate product updates, risks, and metrics to senior leadership and stakeholders.
- Champion user-centric design and accessibility in authentication experiences

**We’re interested in hearing from people with the following experience**:
**Technical Expertise**
- Deep understanding of identity protocols (SAML, OAuth2, OIDC, SCIM).
- Hands-on experience with **Ping Identity**suite (PingFederate, PingAccess, PingID).
- Strong knowledge of **Microsoft Entra ID**, Conditional Access, Identity Protection, and Graph API.
- Familiarity with cloud platforms (Azure, AWS) and hybrid identity architectures.
- **AI Literacy**: Familiarity with AI tools and responsible AI practices to enhance product delivery and innovationAgentic AI Identity : Familiar with SPIFEE framework, authentication protocols and thought leadership for AI Identity

**Product & Delivery Skills**
- Proven experience in product ownership or technical program management.
- Agile delivery experience with tools like Jira, Confluence, and Azure DevOps.
- Strong analytical and problem-solving skills with a data-driven mindset.

**Governance & Risk**
- Experience implementing identity governance frameworks and controls.
- Understanding of regulatory requirements and risk management practices.

**Soft Skills**
- Excellent communication and stakeholder management skills.
- Ability to influence and lead across technical and non-technical teams.
- Strategic thinker with a passion for secure and seamless user experiences.

**Preferred Qualifications**:

- Certifications: CISSP, CISM, Azure Security Engineer, Ping Identity Certified Professional.
- Experience in large enterprise environments with complex identity ecosystems.
- Background in cybersecurity, compliance, or enterprise architecture.

We're aware of some accessibility issues on this site, particularly for screen reader users. We want to make finding your dream job as easy as possible, so if you require additional support please contact HR Direct on 1800 989 696.

Advertising End Date: 26/08/2025