About us

At CommBank, our purpose is to improve the financial wellbeing of our customers and communities. We are a technology-led bank, delivering world-class platforms, innovative services, and secure, resilient operations.

Do work that matters

We are seeking a Manager - Supplier Risk & Controls to deliver risk outcomes across a portfolio of critical third-party suppliers.

This role sits within the Supplier Risk & Controls (SR&C) function, and responsible for ensuring supplier engagements are delivered effectively and in line with regulatory expectations.

As a Manager, you will combine strong risk judgement, stakeholder engagement, and delivery expertise to own supplier risk outcomes from onboarding through to ongoing assurance and remediation.

Your impact

In this role, you will:

• Detect and formulate responses to changes in the internal and external risk landscape that may impact the business.
• Proactively identify opportunities to enhance the design and resiliency of business processes and compliance.
• Prepare reporting to accountable owners, governing forums and committees, to create transparency of risk outcomes.
• Recommend areas of prioritisation to the business for investment, intervention and enhancement to mitigate risk.
• Partner with the business to manage risks, compliance obligations and operations within risk appetite.
• Advise the business on preparing responses to issues, near misses, and emerging risks or threats to resilience.
• Advocate for the use of appropriate tools, practices and frameworks to enable execution of risk reduction and proactive risk management.
• Input into recommendations to support the execution of the business strategy, including strengths, vulnerabilities and enhancements.
• Support the development of a proactive risk and control culture.

We're interested in hearing from people who have

• Strong experience in third-party risk, operational risk, and controls assurance.
• A solid understanding of third-party risk frameworks and control environments.
• Experience engaging and influencing senior stakeholders across business and risk.
• Familiarity with regulatory expectations for outsourcing and third-party risk (e.g. CPS230).
• Sound understanding of information security management, Privacy legislation, ITIL, IT service continuity, IT disaster recovery, business continuity management, AI and third-party control assurance (e.g. SOC I, SOC II, Technology Audit).
• Have a passion for Supplier and technology risk and remain up to date on the latest emerging industry trends and disruptive technologies.

Highly regarded

• Experience in financial services, including supplier governance or outsourcing.
• Knowledge of control frameworks (e.g. RCSA, control testing, assurance programs).
• Understanding of technology risk, information security, AI and resilience concepts.

Why join us

• Play a key role in protecting the organisation from third-party risk.
• Own end-to-end outcomes in a high-impact, enterprise-wide function.
• Work in a collaborative, high-performing team across global locations.
• Influence how supplier risk is managed at scale.

At CommBank, we support our people with the flexibility to balance where work is done with at least half their time each month connecting in office. We also have many other flexible working options available including changing start and finish times, part-time arrangements and job share to name a few. Talk to us about how these arrangements might work in the role you're interested in.

If you're already part of the Commonwealth Bank Group (including Bankwest, x15ventures), you'll need to apply through Sidekick to submit a valid application. We're keen to support you with the next step in your career.

We're aware of some accessibility issues on this site, particularly for screen reader users. We want to make finding your dream job as easy as possible, so if you require additional support please contact HR Direct on 1800 989 696.

Advertising End Date: 08/09/2026