Product Owner

Technical Product Owner - Authentication and Access Tech

• We're embarking on an exciting transformation with a key focus on modernising data, cloud, and API product solutions.
• You have knowledge that spans across product management, cloud, and API transformation services.
• Together we will build tomorrow's bank today, using world-leading[HT1] technologies.

Do work that matters:

We're building tomorrow's bank today. This means we need creative and diverse experts to help us redefine what customers expect from a bank. Envisioning new technologies that are still waiting to be invented and reimagining products that support our customers and help build Australia's future economy.

CommBank is recognised as leading the industry in IT and operations with its world-class platforms and processes, agile IT infrastructure. Our technology teams are the brains behind Australia's number one banking app, Netbank, Cardless Cash, Comm Sec Pocket, and Spend Tracker. We want you to join in on that journey.

See yourself in our team:

As a Senior Technical Product Owner for Authentication Platforms, you will lead the strategic direction, delivery, and continuous improvement of workforce identity solutions across the enterprise. You will be responsible for driving the roadmap, governance, and risk posture of authentication services, ensuring secure, scalable, and user-friendly access for employees, contractors, and partners.

You will work closely with engineering, cybersecurity, compliance, and business stakeholders to deliver robust identity solutions using platforms like Ping Identity and Microsoft Entra ID (formerly Azure AD).

Your impact and contribution:

Product Ownership & Strategy

• Define and own the product vision and roadmap for workforce authentication platforms.
• Align product strategy with enterprise security goals, compliance requirements, and user experience.
• Prioritize features and enhancements based on business value, risk, and technical feasibility.

Platform Delivery & Execution

• Lead cross-functional teams to deliver authentication capabilities including SSO, MFA, passwordless, and conditional access.
• Oversee integration of identity platforms with enterprise applications and infrastructure.
• Manage vendor relationships and platform upgrades (e.g., Ping Identity, MS Entra).

Controls & Governance

• Implement and maintain identity governance policies and controls.
• Ensure compliance with internal standards and external regulations (e.g., ISO 27001, NIST, SOC2).
• Collaborate with audit and risk teams to address findings and improve control maturity.

Risk Management

• Identify and mitigate risks related to identity and access management.
• Support threat modeling and risk assessments for authentication flows.
• Drive adoption of secure authentication patterns across the organization.

Stakeholder Engagement

• Act as the primary point of contact for authentication platform capabilities.
• Communicate product updates, risks, and metrics to senior leadership and stakeholders.
• Champion user-centric design and accessibility in authentication experiences

We're interested in hearing from people with the following experience:

Technical Expertise

• Deep understanding of identity protocols (SAML, OAuth2, OIDC, SCIM).
• Hands-on experience with Ping Identity suite (PingFederate, PingAccess, PingID).
• Strong knowledge of Microsoft Entra ID, Conditional Access, Identity Protection, and Graph API.
• Familiarity with cloud platforms (Azure, AWS) and hybrid identity architectures.
• AI Literacy: Familiarity with AI tools and responsible AI practices to enhance product delivery and innovation
• Agentic AI Identity : Familiar with SPIFEE framework, authentication protocols and thought leadership for AI Identity

Product & Delivery Skills

• Proven experience in product ownership or technical program management.
• Agile delivery experience with tools like Jira, Confluence, and Azure DevOps.
• Strong analytical and problem-solving skills with a data-driven mindset.

Governance & Risk

• Experience implementing identity governance frameworks and controls.
• Understanding of regulatory requirements and risk management practices.

Soft Skills

• Excellent communication and stakeholder management skills.
• Ability to influence and lead across technical and non-technical teams.
• Strategic thinker with a passion for secure and seamless user experiences.

Preferred Qualifications:

• Certifications: CISSP, CISM, Azure Security Engineer, Ping Identity Certified Professional.
• Experience in large enterprise environments with complex identity ecosystems.
• Background in cybersecurity, compliance, or enterprise architecture.

Whether you're passionate about customer service, driven by data, or called by creativity, a career here is for you.

Our people bring their diverse backgrounds and unique perspectives to build a respectful, inclusive and flexible workplace. We are working hard to build a team of people who represent the rich diversity of our customers and communities. If you're excited about this opportunity but you don't meet every single requirement, or your experience doesn't align perfectly, we still want to encourage you to apply. You may just be the perfect candidate for this opportunity or another within CommBank.

At CommBank we will inspire you with work that makes a difference, surround you with talented people that respect and value each other, and empower you to grow professionally and personally. Most of all, making a positive impact for customers, communities and each other is part of our every day.

We're determined to make a real difference for Australia's first peoples. We encourage all interested applicants to apply. If you're already part of the Commonwealth Bank Group (including Bankwest), you'll need to apply through Sidekick to submit a valid application. We're keen to support you with the next step in your career.