Manager, Supplier Risk

Do work that matters:
Legal and Group Secretariat (L&GS) comprises of the Legal Services Function and Group Governance.

Legal Services works with the Group business units and support functions to help achieve their strategic goals and priorities through the provision of expert, commercially focused legal advice. Group Governance provides corporate governance and corporate secretariat services to the Commonwealth Bank of Australia Board of Directors and its Committees and to CBA's subsidiary companies and their various committees.

Marketing and Corporate Affairs (MCA) is focused on rebuilding trust and pride in the Commonwealth Bank with direct responsibility for end-to-end marketing, branding, stakeholder insights, government relations, communications and corporate social responsibility.

Group Marketing brings together the Group's marketing, brand, sponsorship, social and research and insight's teams. Marketing puts the customer at the centre of everything we do to deliver customer experiences that demonstrate trust, personalized guidance, simple and easy solutions and excellent service. The role of Corporate Affairs is to enhance and protect the Group's reputation and drive the Group's positioning on key issues. Corporate Affairs has responsibility for all core internal and external communication channels, government and industry affairs, stakeholder relations, issues management, sustainability and community.

See yourself in our team:
The Risk & Control Advisory & Delivery team is responsible for ensuring that strong processes and controls are in place and decisions are well informed, timely and socialised. They achieve this through providing an end to end risk and control service, including risk advisory, effective design & implementation of controls, ensuring the operational risk & compliance frameworks are effectively implemented in their BU's and also ensuring each BU LT has the right level of comfort and governance within their risk environment.

Your Impact:
This role will report to the Senior Manager, Risk & Control - Marketing & Corporate Affairs and Legal & Group Governance. The role will support the L&GS and MCA support units.

The objective of the role will be to develop and maintain an effective risk management framework across MCA & L&GS. This will involve a mix of BAU risk management activities, risk reporting, risk and control profiling, controls testing and supplier risk management.

Other responsibilities include:

- Adhere to the
- Code of Conduct
- The Code of Conduct sets the standards of behaviour, actions and decisions we expect from our people.
- Ensure established and new suppliers of products and suppliers are managed in line with the Supplier Governance Framework (SGF) and ensure activities are appropriately completed in collaboration with Line 2 and Group Procurement
- Ensure risk assessments for existing suppliers are maintained and refreshed on a regular basis in line with the SGF and adequately assess the risks associated with outsourced activities
- Oversee the effective design of controls for all new and changing processes and operations, and advise business leaders throughout the implementation process
- Set expectations and manage data quality in/maintain various databases (including RiskInSite) and provide senior business leaders with insights on monthly management reporting
- Lead and coach team members to identify, initiate and manage actions to mitigate risks and to strengthen controls, including issues identified through audits and other external processes
- Accountable for ensuring risks are profiled and captured in the Risk Profile (RCSA) and updated when risk trigger events occur
- Accountable for and provide guidance to stakeholders to ensure the correct risk and controls overlay the end to end process mapping and documentation management to support the control process
- Partner with and advise Line 2 colleagues to determine and lead out optimal course of action to remediate any significant supplier related issues within the BU/SU.

We're interested in hearing from people who:

- Risk Mindset -All CommBank employees are expected to proactively identify and understand, openly discuss and act on current and future risks;
- 5-10 years' experience in banking/financial services/other relevant experience, and/or minimum 4 years' experience in Operational Risk management roles;
- Ability to analyse/identify risks and opportunities and recommend appropriate actions;
- Influencing and consulting skills, the ability to build relationships with stakeholders at all levels;
- Strong written and verbal communication skills;
- Ability to think critically and analytically and use data driven insights to solve problems;
- Knowledge of Operational and Compliance Risk frameworks would be advantageous;
- BU specific - business commercial aptitude & knowledge;
- Controls design experience;
- Facilitation skills; and
- Strong people leadership skills, including expe