Manager, Line 1 Business Risk

With a company culture rooted in collaboration, expertise and innovation, we aim to promote progress and inspire our clients, employees, investors and communities to achieve their greatest potential. Our work is the catalyst that helps others achieve their goals. In short, We Enable Possibility℠.

JOB SUMMARY

A Line 1 Business Risk and Controls Manager acts as a key point of contact within the business as the first line of defence ensuring the business operates within its defined risk appetite by developing, embedding, and maintaining robust business controls. The role is responsible for the effective identification, assessment, and management across business operations including any outsourced service providers.

This position ensures business activities remain compliant with APRA’s prudential standards (CPS 230, CPS 234, CPS 220), ASIC obligations, and industry best practice, while fostering a strong risk culture and driving operational resilience across the organisation.

Risk Identification and Assessment:

- Identify, assess, and manage operational risks in line with Arch’s Operational Risk Management Framework.
- Assess and monitor operational risks arising from service providers, ensuring that contracts and onboarding of service providers reflect APRA expectations under CPS 230.
- Ongoing development and maintenance of a comprehensive Governance, Risk, and Compliance register for operational risks, ensuring incidents, issues and control failures are tracked to closure.

Risk Mitigation and Control:

- Partner with business leaders to develop and implement risk mitigation strategies and controls.
- Develop, implement, and maintain internal controls across operational functions.
- Oversee control effectiveness testing and ensure remediation of weaknesses.
- Undertake thematic reviews, root cause analysis, and ensure corrective actions are embedded.
- Regulatory and Compliance Alignment:

- Ensure business processes comply with APRA prudential standards, ASIC conduct obligations, privacy and consumer laws.
- Support regulatory reviews, audits, and board/committee reporting.
- Partner with compliance and legal teams to interpret regulatory changes and embed new obligations into operational processes.

Material Service Providers and Outsourcing:

- Work closely with Material Service Provider internal business owners assisting with risk assessments, monitoring and compliance oversight.
- Ensure contracts, reporting, and performance management reflect CPS 230 requirements.
- Maintain the Service Provider Management Policy and Service Provider Register ensuring it is up to date and reflects APRA expectations.

Business Continuity and Operational Resilience:

- Support the maintenance of the Business Impact Analysis including the review of critical operations under CPS 230.
- Develop, maintain, and test business continuity and disaster recovery plans
- Conduct scenario analysis and stress testing for critical operations in conjunction with BCP testing.

Reporting and Governance:

- Prepare risk and control reports for senior management, risk committees, and the board as required.
- Coordinate ASIC reporting on complaints and ICA annual certification data collection.
- Escalate material risks, issues, and incidents promptly.
- Contribute to regulatory submissions and prudential reviews.

Collaboration and Support:

- Promote a proactive risk culture, embedding accountability for risk within all business units.
- Collaborate with Arch’s Risk and Compliance function to ensure a coordinated approach to risk management and compliance assurance, including monitoring and reporting.
- Provide guidance and support to business units on risk management matters, including incident reporting and remediation.
- Prepare and present Operations specific risk training as required.
- Coordinate Operations internal and external audit requests

Knowledge & Skills:

- Demonstrated ability to deliver results in a fast-paced environment, under tight deadlines, or with competing objectives.
- Strong stakeholder relationship skills, with ability to build credibility amongst peers and customer-service/partnership oriented.
- Commercial mindset with a curiosity to understand Arch’s business and how this relates to risk management strategy and approach.
- Strong communication skills in written and verbal format.
- Strong interpersonal, organisational, and negotiation skills.
- Ability to function as member of a multi-disciplined, international team.
- Meaningful project management, planning, and decision-making experience.

Education & Experience:

- Tertiary qualification required as well as a minimum 5 years’ experience, which must include risk management experience, with a preference for mortgage risk or insurance experience.
- Additional relevant qualifications, either through prior roles or externally, will also be taking into consideration.
- Practical experience implementing APRA prudential standards (CPS 230) or equivalent regul