Manager Cyber Risk

2 days ago


Sydney, Australia Commonwealth Bank of Australia Full time

Manager Cyber Risk

**See yourself in our team**:
The Technology and Operations (Tech & Ops) Risk team is responsible for providing specialist Operational Risk and Compliance (OR&C) advice and assurance of decisions made across the Technology, Chief Operating Office, and Business Unit divisions.

**Do work that matters**:
The Manager Cyber Risk plays and essential role within the **Security Operational Risk **team supporting the Group Security division. Work with the Executive Manager Cyber Risk to provide independent Line 2 advice and assurance over Line 1 implementation of the Risk Management Approach, the Operational Risk and Compliance Management Framework and actively uplift risk capability across the Cyber Security functions.

**Key responsibilities for this role include**:
**Technical**:

- Provide SME risk management advice to crews aligned to the following cyber domains: Application & Service Protection, Vulnerability Management, Data Security, Cloud Security, Third Party Security, Identity & Access Management, and Cyber Defence.
- Working as part of a team of professional SMEs to provide independent, pragmatic and value adding Operational Risk advice and assurance for technology and cyber risks across the Group.
- Monitoring and reporting of three lines of accountability (3LoA) activities to the Executive Manager, including BAU management of the Risk Management Approach, the Operational Risk Management Framework and Compliance Management Framework in support of CPS 220.
- Contributing to the oversight and monitoring of key technology and cyber risks, controls, issues, incidents, and risk-in-change.
- Supporting the appropriate identification, escalation and reporting of all related technology and cyber risk and compliance matters to the relevant stakeholders, including the relevant NFRCs, your EM/GM and to the Technology and Operations CRO.

**Leadership**:

- Work as part of a cross-skilled team that can support a range of inter-connected risk domains; speaking up and contributing to appropriate Line 2 oversight and challenge.
- Provide ideas for Line 2 risk management and assurance activities, data analytics and stakeholder reporting; contribute to a culture of learning and collaboration.
- Role model behaviours that are consistent with CBA values expectations and leadership principles; provide a safe workplace for all team members, customers and visitors.
- Develop and maintain partnerships with stakeholders; become a trusted advisor using commercial acumen, practical recommendations; and assist the business to understand where prioritised focus on key risks and compliance matters is required.

**We're interested in hearing from people who have**:

- Experience required in cyber security with sound knowledge of applicable industry standards, frameworks and regulations (e.g. CPS234, NIST, ISO27001, Information Security Manual, Essential 8, OWASP, MITRE).
- Preference for information security certification (e.g. CISM, CRISC, CISSP).
- Background in Operational Risk and Compliance with technology and cyber risk management specialties within the Financial Services industry highly regarded.
- High quality written and verbal communication skills, report writing, evidence gathering and data analysis capabilities.
- Stakeholder and influencing skills with the ability to proactively engage Line 1 teams and engender trust with pragmatic, commercially balanced risk advice.
- A curious and humble mindset, understanding of external trends and changes, interest in continuous learning, to build risk management best practice.

**Your Career**:
If you live the values and demonstrate the people capabilities we can offer great opportunities. Whether you want to move across the organisation or up into a leadership role, the way you live the values and demonstrate the people capabilities are key. Use the capabilities required for this role as a guide to the critical skills and behaviours you need for your next move.

We're aware of some accessibility issues on this site, particularly for screen reader users. We want to make finding your dream job as easy as possible, so if you require additional support please contact HR Direct on 1800 989 696.

Advertising End Date: 25/09/2024

Job ID REQ218629


  • Manager Cyber Risk

    4 days ago


    Sydney, Australia Commonwealth Bank Full time

    **See yourself in our team**: The Technology and Operations (Tech & Ops) Risk team is responsible for providing specialist Operational Risk and Compliance (OR&C) advice and assurance of decisions made across the Technology, Chief Operating Office, and Business Unit divisions. **Do work that matters**: The Manager Cyber Risk plays and essential role within...

  • Cyber Risk Manager

    6 hours ago


    Sydney, Australia Allianz Australia Full time

    **CYBER RISK MANAGER - RISK AND COMPLIANCE MANAGER | SYDNEY, NSW** At Allianz, we’re proud to be one of the world’s leading insurance and asset management brands, with a workforce as diverse as the world around us. We care about our customers, which is why we hire the very best people to further our commitment to securing the future of our customers,...


  • Sydney, Australia Vertex Cyber Security Full time

    **Core Duties**: The Cyber Security Consulting Team Lead manages the Consulting Team to deliver end-to-end cyber security consulting services, undertaking duties that include, but are not limited to: - Conducting comprehensive cyber security risk assessments and audits of client technical environments (cloud and on-premise) and policies and procedures,...


  • Sydney, Australia University of New South Wales Full time

    **Job no**: 527962 **Work type**: full time **Location**: Sydney, NSW **Categories**: Information Technology, Cyber - Employment Type: full time continuing role as a Cyber Security Risk Manager - Excellent salary package including superannuation - Location: UNSW Kensington Campus (Hybrid Working Opportunities) **About UNSW**: UNSW isn’t like other places...


  • Sydney, Australia KPMG Australia Full time

    **Job Description** About the Team** At KPMG Australia, our Consulting Technology Risk and Cyber team is at the forefront of enabling organisations to navigate the complex world of technology, cyber threats, and information security. We deliver impactful and innovative solutions tailored to our clients’ needs, helping them identify and manage technology...


  • Sydney, Australia KPMG Full time

    **About the Team** At KPMG Australia, our Consulting Technology Risk and Cyber team is at the forefront of enabling organisations to navigate the complex world of technology, cyber threats, and information security. We deliver impactful and innovative solutions tailored to our clients’ needs, helping them identify and manage technology risks, safeguard...


  • Sydney, New South Wales, Australia Westpac Group Full time $180,000 - $250,000 per year

    Job DescriptionLead oversight of cyber risk across domains like identity and access, application security, data security, AI, and threat managementInfluence Group-wide cyber risk strategy, policy, and executive-level reportingBe a trusted advisor on business management of cyber risk ,emerging threats, and risk governanceWhat's the role?We're looking for a...


  • Sydney, New South Wales, Australia KPMG Australia Full time $120,000 - $180,000 per year

    Job DescriptionAbout the TeamAt KPMG Australia, our Consulting Technology Risk and Cyber team is at the forefront of enabling organisations to navigate the complex world of technology, cyber threats, and information security. We deliver impactful and innovative solutions tailored to our clients' needs, helping them identify and manage technology risks,...


  • Sydney, New South Wales, Australia Colonial First State Full time $104,000 - $130,878 per year

    Job DescriptionAre you ready to be part of an organisation that values expertise, passion and diversity? At CFS we know that the foundation of our success lies in our exceptional people. We believe in celebrating individuality, have a passion for high performance and creating an environment where you can unleash your full potential. Our people enable us to...

  • Cyber Risk Consultant

    6 hours ago


    Sydney, Australia Aon Full time

    Full time, permanent opportunity based in Sydney **Cyber Risk Consultant** This role is responsible for helping to set the strategy in relation to Aon’s Cyber Risk endeavours. In the role you will be executing the provision of Cyber Risk consulting services to a variety of clients within our corporate and global segments. The portfolio cuts across all...