Risk and Control Enablement Manager (12 Month Contract)

About the team

The Business Banking (BB) Chief Controls Office (CCO) focus on driving simple, proactive risk management to enable BB’s sustainable growth. Our objectives include building safer, better foundations for our customers through providing end-to-end risk and control service, including effective design & implementation of controls, reduced privacy risk exposure, enhanced ways of working, and better risk hygiene behaviours.
The Privacy team supports the BB CCO strategy and our Lines of Business (LoB) by providing:

• skilled SME knowledge on Privacy risk and compliance,

• delivering privacy impact assessments,

• business advice including control recommendations, and

• uplifting the privacy capability across BB

Do work that matters 

The position of Manager Risk and Controls – Privacy will support the ongoing management of privacy risk within BB CCO and bring risk management experience, awareness, and support to all our LoBs.

This opportunity is for a 12 Month Secondment.

On any given day you will

• Monitor BB’s compliance with Privacy obligations, Records Management requirements, BB Privacy risk profile, and resolution of related issues and incidents. 

• Act as the first point of contact and support BB in Identifying, assessing, and managing Privacy risks.

• Manage reporting on relevant Privacy Management related matters, including metrics, KRIs, issues, incidents, and risks. 

• Supporting with Privacy related regulatory and policy changes into BB, include participating and supporting working groups.

• Embed relevant privacy policies, frameworks, and compliance by design principles within BB and increase privacy and data management risks awareness, including uplifting privacy capabilities across BB. 

• Support with privacy risk assessments, and management and mitigation of privacy risks through identification of when Privacy Impact Assessments or third-party risk assessments are required, and the management and rectification of privacy data breaches. 

• Support management of the Group Privacy Policy Suite across all LoBs in BB, Records Management Procedure and Data Transfer Agreement processes. 

• Building strong relationships with key partners including the Group Privacy Office, Line 2 Privacy Compliance, Products and Line 1 Risk teams. 

We're interested in hearing from people who have

• Risk Mindset and Management skills - While privacy knowledge is desirable, candidates must demonstrate strong knowledge of risk and controls environments, ability to proactively identify and consider existing and emerging privacy risks and instances of non-compliance.  

• Strong written and verbal communication - Demonstrate ability to provide clear and concise written and verbal advice to various stakeholders, effectively translating complex information into easily understandable terms

• Strong attention to detail, organisational, planning, time management and project management skills - Ability to effectively organise and prioritise tasks to ensure timely completion of work, leading to improved team efficiency.

• Ability to apply analytical, critical and strategical thinking skills to solve problems – Candidates must demonstrate the ability to solve complex problems and improve business processes by applying relevant privacy, security, and records management policies

• Technical skills and knowledge base in Operational Risk and Compliance related activities / functions is preferable.  

Working at CommBank 

At CommBank, we support our people with the flexibility to balance where work is done with at least half their time each month connecting in office. We also have many other flexible working options available including changing start and finish times, part-time arrangements and job share to name a few. Talk to us about how these arrangements might work in the role you’re interested in.

Advertising End Date: 10/04/2025