Senior Manager Cloud Foundations Operational Risk and Compliance
- LocationSydney CBD Area
- Work typeNot stated
- EmploymentFull-time
- Posted10 November 2026
- SourceCBA's careers page (Workday)
Live checkFirst seen 32 min ago; still listed on CBA's careers page 32 min ago.
Moves fastWhen CBA takes a role down early, it is usually about 10 days after posting. Apply soon.
At a glance
- VisaRight to work required
Read from the ad by RoleFinder, with rules and an AI reading; the description is the source.
About the role
See yourself in our team
Risk Management is an independent function within CommBank, providing advice, oversight, assurance and challenge to help the Group operate within its risk appetite.
The Technology and Operations Risk team provides specialist Line 2 risk oversight across Technology and COO.
Do work that matters
As Senior Manager Technology Risk, you will provide Line 2 risk advice, challenge and oversight across the CTO Cloud and Architecture portfolio.
This is an opportunity to take your technical experience beyond individual systems and apply it at enterprise scale – working across complex Cloud and Architecture challenges, understanding how technology really works and influencing important decisions early.
You'll have the opportunity to bring your own perspective, challenge thinking and influence important technology decisions from a risk perspective.
Key responsibilities
- Get beneath the surface of systems and architectures to understand risks and assess whether controls are effective.
- Apply independent Line 2 judgement across material technology risks, controls, issues, incidents and change.
- Identify material and emerging risks across cloud, cyber, DevSecOps, software engineering, data, AI and resilience.
- Connect technical issues to broader business, strategic and systemic implications.
- Lead complex risk work, bringing together different perspectives and driving outcomes through ambiguity.
- Operate autonomously, using judgement to focus on the risks and decisions that matter most.
- Build trusted relationships across Engineering, Architecture, Technology and Risk, engaging early to influence better outcomes.
We’re interested in hearing from people who have
- A strong hands-on technology background in software or platform engineering, DevSecOps, cloud engineering or security, penetration testing, security engineering or architecture.
- Experience applying your technical expertise to risk, security or control decisions, whether from within Technology or a Risk function.
- Deep technical curiosity and a genuine interest in how systems, platforms and architectures work.
- Strong critical thinking and the ability to develop sound risk judgement across complex and ambiguous problems.
- The confidence and communication skills to engage credibly with both deeply technical and senior stakeholders.
- A curious, pragmatic and collaborative mindset, with the willingness to bring your own perspective and learn from others.
We value independent thought and different perspectives. You'll be trusted to form your own views, challenge ours and help shape where we focus our attention.
At CommBank, we're committed to creating an accessible, inclusive and respectful workplace. If you require support or adjustments, please let us know. We welcome applications from people of all backgrounds and we're particularly committed to making a positive difference for Aboriginal and/or Torres Strait Islander Peoples. For support please contact 1800 989 696.
If you're already part of the Commonwealth Bank Group (including Bankwest, x15ventures), you'll need to apply through Sidekick to submit a valid application. We’re keen to support you with the next step in your career.
We're aware of some accessibility issues on this site, particularly for screen reader users. We want to make finding your dream job as easy as possible, so if you require additional support please contact HR Direct on 1800 989 696.
Advertising End Date: 24/11/2026
Get open roles ranked against your CV
Add your CV once. RoleFinder ranks the open roles where you want to work, plus remote ones, against it, shows your best 12 with a one-line reason each, and emails you new matches once a week. The file is read once by AI and not kept; employers never see it.
Sign in with Google or email to start. How we handle your CV