Head of Divisional Controls

**Work type**: Permanent Full time
**Location**: Aust - VIC Metro

**About the team**

The NAB Divisional Controls Office (DCO) Technology is accountable for providing controls expertise to the Group Executive Technology and Enterprise Ops; Technology Executives and their teams. The DCO team consults and educates NAB divisions across risk awareness, understanding, and change to create a centre of excellence; assisting management to develop adequate systems and controls to identify, assess, quantify and manage the risks in the relevant business unit.

**About the role**

Reporting to the Executive DCO Technology, in this role you will be responsible for leading a controls team to support the Security Business in its execution of risk management accountabilities. You will also Lead a team of Security Control SMEs to assist the business to design, implement and operate a Security control environment that mitigates the risks, meets obligations and complies with the requirements of policies. Scope of work will cover Security related controls in all business units of NAB.

**Responsibilities include**:

- Uplift controls awareness and capability within the Technology teams, including supporting quality Control Self Assessments
- Designing controls, assisting to identify the right key controls to mitigate key risks and obligations applicable to the business
- Provide business-aligned advice to the Technology business; and risk and controls specific insights and information for internal and external risk reporting
- Operational risk and regulatory obligation identification, impact assessment and change within the Division
- Risk profiling: assisting to identify key risks and design of indicators to monitor, input into Divisional Risk Setting Statements as relevant
- Providing guidance on risk and control items including Subject Matter Expertise for the following: Risks, Obligations Events, Change, and related Policies; Remediation action plans to address any control design or operating effectiveness gaps; Requisitions on Management attestations, ensuring evidence is consolidated at a Sub-Divisional level; Relevant Risk Management Forums and/or other risk related committees as required

**Key Accountabilities**:

- Develop, Execute and Monitor Targeted Controls Rectification Plan Design controls with control owners across the Enterprise and facilitate documentation in risksmart for Targeted Controls; and confirm appropriate implementation of controls.
- Proactive monitoring and assessment of the Specialist Risk control environments to identify areas of exposure. Support business to build or uplift controls to prevent occurrence or reoccurrence of the circumstances resulting from a Security risk or compliance event
- Providing specialist Operational Risk and Compliance Policy and Framework advice and guidance to the business
- Uplift in the Divisional control environment
- Exceptional communication with the Divisional Leadership Teams and senior stakeholders
- Development and engagement of direct reports

**Key Skills and Experience**:

- 7+ years’ experience in operational risk management
- Relevant Risk and Controls Certifications will be highly regarded (e.g. CRISC, CISM, CCSK, CISA, CGEIT)
- Knowledge of relevant industry standards desirable (e.g. ISO 27001, COBIT, NIST, ISO31000, CPS 234/CPG 235)
- Comprehensive knowledge of Technology risk, control design and assurance methodologies
- Outstanding knowledge of risk management and compliance disciplines
- Proven ability to lead high performing teams
- Practical approach to solving issues with strong commercial acumen
- Exceptional time management and ability to multi-task and adapt to changing priorities

**NAB, invested in you**

At NAB, we believe success comes from our people. We're committed to supporting your talent and skills through your career, as you help us build a culture that affects change for our customers - and for the community too. If you think this role is the right fit for you, we encourage you to apply.
- Please note unsolicited CVs from agencies will not be accepted.