Ho Divisional Controls Group Security

**Work type**: Permanent Full time
**Location**: VIC- Melbourne CBD

**It’s more than a career at NAB. It’s about more opportunity, more moments to make a difference and more focus on you.**

You make NAB. You get it done for our customers and our communities. You’re laying the foundations for NAB’s future success. Together we’ll grow, excel for our customers, and make this a workplace to be proud of.

It’s a good time to see what more you can find at NAB as Head of Divisional Controls - Group Security

**The role**:

- The Head of Divisional Controls is responsible for leading and driving the management of first line risk across Group Security division. The Head of Group Security DCO will support the Exec to deliver risk and compliance oversight and challenge, solving complex issues that requires expertise, leadership and deep security and risk management experience.
- This role is critical in driving and strengthening technology risk management, managing technology controls and improving compliance support Group Security team.
- The role assists Group Security management to develop adequate technology controls to identify, assess, quantify and manage the risks in the relevant business.
- The role will work closely with broader risk networks as well as Group Security to deliver on the technology/ cyber risk initiatives within Group Security business.
- Cross function activities across Divisions and subsidiaries.

**Essential capabilities**:

- Risk management and control thought leadership.
- Broad IT background and strategic execution (deep Security and Risk Management knowledge is essential)
- Ability to oversee and provide appropriate advice, guidance and expertise to support business leaders with executing their risk and compliance management accountabilities including impacts as a result of change initiatives and projects
- Thinks broadly within defined strategies and policies to meet business needs.
- Business and operational acumen with ability to understand the implication of unmitigated risks exposures.
- Strong communication skills, technical and business is essential.

These roles may deliver and manage the operational requirements or outcomes of a team that is integrated across the Enterprise to agreed metrics/objectives.

**Other capabilities**:

- Providing specialist Risk and Compliance Policy and Framework advice and guidance to the business
- Uplift in the Divisional control environment
- Exceptional communication with the ability to engage, build relationships and influence stakeholders at senior levels.
- Development and engagement of direct reports - excellent people leadership.

**Experience**
- 7+ years experience in Financial services.
- 5+ years experience in operational/ technology/ cyber risk management.
- 5+ years experience in related business technology domain.
- Experience in leading first line technology/ cyber risk and control function.
- Experience in assurance or audit domain is desirable.
- C-Suite engagement and proven track record of reporting to senior stakeholders including board/ risk committees.
- Regulatory engagement experience and capable of shaping and responding to audit, compliance obligations and engagement requests.
- Broad technology experience and the ability to communicate strategy and technical outcomes.
- Knowledge of relevant industry standards desirable (e.g., ISO 27001, COBIT, NIST, ISO 31000, CPS 234/ CPG 235, SWIFT compliance).
- Comprehensive knowledge of technology/ cyber risk, control design and assurance methodologies.
- Extensive risk management and control function integration expertise.
- Proven ability to lead high performing teams
- Practical approach to solving issues with strong commercial acumen.
- Exceptional time management and ability to multi-task and adapt to changing priorities.

**Qualification Requirements**:

- Tertiary qualification in a business-related discipline desirable.
Post Graduate qualification desirable. Relevant Risk and Controls certifications e.g ISACA (CISA/ CISM/ CRISC / CDPSE) or ISC2 (CISSP) or CCSP certifications desirable.

**Key Accountabilities**:
Reporting to the Executive, DCO Technology. In this role you will be responsible for (leading a Divisional Controls team), to support Group Security in its execution of risk and compliance management accountabilities in line with DCO technology service catalogue.

**This role is primarily responsible for**:

- Technology/ cyber risk and regulatory obligation identification, impact assessment and change within the Division.
- Engaging and managing senior stakeholders to implement and improve business systems and processes through the use/integration of the risk and compliance framework.
- Risk profiling: assisting to identify key risks and design of indicators to monitor, input into Divisional Risk Setting Statements as relevant.
- Designing controls: assisting to identify the right key controls to mitigate key risks and obligations applicable to the b