Manager - Supplier Risk and Controls

Posted 8 Hours Ago
Be an Early Applicant
Area, Viveiro, Lugo, Galicia, ESP
In-Office
Entry level
Fintech • Financial Services
The Role
Manage supplier risk and controls across critical third-party relationships, from onboarding through assurance and remediation. Identify emerging risks, strengthen process resilience, prepare risk reporting, recommend mitigation priorities, and advise stakeholders on compliance, resilience, and operational risk. Partner with business and risk leaders to maintain regulatory alignment, support control frameworks, and foster a proactive risk culture. The role requires expertise in third-party and operational risk, controls assurance, technology risk, information security, business continuity, and outsourcing regulation.
Summary Generated by Built In

About us

At CommBank, our purpose is to improve the financial wellbeing of our customers and communities. We are a technology-led bank, delivering world-class platforms, innovative services, and secure, resilient operations.

Do work that matters

We are seeking a Manager – Supplier Risk & Controls to deliver risk outcomes across a portfolio of critical third-party suppliers.

This role sits within the Supplier Risk & Controls (SR&C) function, and responsible for ensuring supplier engagements are delivered effectively and in line with regulatory expectations.

As a Manager, you will combine strong risk judgement, stakeholder engagement, and delivery expertise to own supplier risk outcomes from onboarding through to ongoing assurance and remediation.

Your impact

In this role, you will:

  • Detect and formulate responses to changes in the internal and external risk landscape that may impact the business.

  • Proactively identify opportunities to enhance the design and resiliency of business processes and compliance.

  • Prepare reporting to accountable owners, governing forums and committees, to create transparency of risk outcomes.

  • Recommend areas of prioritisation to the business for investment, intervention and enhancement to mitigate risk.

  • Partner with the business to manage risks, compliance obligations and operations within risk appetite.

  • Advise the business on preparing responses to issues, near misses, and emerging risks or threats to resilience.

  • Advocate for the use of appropriate tools, practices and frameworks to enable execution of risk reduction and proactive risk management.

  • Input into recommendations to support the execution of the business strategy, including strengths, vulnerabilities and enhancements.

  • Support the development of a proactive risk and control culture.

We’re interested in hearing from people who have

  • Strong experience in third-party risk, operational risk, and controls assurance.

  • A solid understanding of third-party risk frameworks and control environments.

  • Experience engaging and influencing senior stakeholders across business and risk.

  • Familiarity with regulatory expectations for outsourcing and third-party risk (e.g. CPS230).

  • Sound understanding of information security management, Privacy legislation, ITIL, IT service continuity, IT disaster recovery, business continuity management, AI and third-party control assurance (e.g. SOC I, SOC II, Technology Audit).

  • Have a passion for Supplier and technology risk and remain up to date on the latest emerging industry trends and disruptive technologies.

Highly regarded

  • Experience in financial services, including supplier governance or outsourcing.

  • Knowledge of control frameworks (e.g. RCSA, control testing, assurance programs).

  • Understanding of technology risk, information security, AI and resilience concepts.

Why join us

  • Play a key role in protecting the organisation from third-party risk.

  • Own end-to-end outcomes in a high-impact, enterprise-wide function.

  • Work in a collaborative, high-performing team across global locations.

  • Influence how supplier risk is managed at scale.

At CommBank, we support our people with the flexibility to balance where work is done with at least half their time each month connecting in office. We also have many other flexible working options available including changing start and finish times, part-time arrangements and job share to name a few. Talk to us about how these arrangements might work in the role you’re interested in.

If you're already part of the Commonwealth Bank Group (including Bankwest, x15ventures), you'll need to apply through Sidekick to submit a valid application. We’re keen to support you with the next step in your career.

We're aware of some accessibility issues on this site, particularly for screen reader users. We want to make finding your dream job as easy as possible, so if you require additional support please contact HR Direct on 1800 989 696.

Advertising End Date: 08/09/2026

Skills Required

  • Strong experience in third-party risk, operational risk, and controls assurance
  • Understanding of third-party risk frameworks and control environments
  • Experience engaging and influencing senior stakeholders across business and risk
  • Familiarity with regulatory expectations for outsourcing and third-party risk, including CPS230
  • Understanding of information security management, privacy legislation, ITIL, IT service continuity, IT disaster recovery, business continuity management, AI, and third-party control assurance
  • Passion for supplier and technology risk, with awareness of emerging industry trends and disruptive technologies
  • Experience in financial services, including supplier governance or outsourcing
  • Knowledge of control frameworks, including RCSA, control testing, and assurance programs
  • Understanding of technology risk, information security, AI, and resilience concepts

Commonwealth Bank Compensation & Benefits Highlights

The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Commonwealth Bank and has not been reviewed or approved by Commonwealth Bank.

  • Leave & Time Off Breadth The bank offers additional Life Leave, the option to purchase up to four extra weeks, pet leave, and paid volunteering leave alongside flexible-working options. Public materials indicate these leave features compare well within Australian banking.
  • Parental & Family Support Permanent employees can access up to 18 weeks of paid parental leave, and superannuation is paid for up to 34 weeks of unpaid parental leave. These provisions extend support for new parents beyond standard settings.
  • Wellbeing & Lifestyle Benefits Access includes CBHS Health Fund, Fitness Passport, a 24/7 wellbeing platform with telehealth, an Employee Assistance Program, and employer‑paid income protection for up to two years, alongside staff banking perks and share plans. This combination provides day‑to‑day value across health, protection, and financial perks.

Commonwealth Bank Insights

Am I A Good Fit?
beta
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company
HQ: Sydney, New South Wales
52,000 Employees
Year Founded: 1911

What We Do

Australia’s leading provider of financial services including retail, premium, business and institutional banking, funds management, superannuation, insurance, investment and sharebroking products and services. We are a business with more than 800,000 shareholders and over 52,000 employees. We offer a full range of financial services to help all Australians build and manage their finances.

Similar Jobs

Mondelēz International Logo Mondelēz International

Manager, Information Security

Big Data • Food • Hardware • Machine Learning • Retail • Automation • Manufacturing
Remote or Hybrid
Spain
90000 Employees

Carbon Robotics Logo Carbon Robotics

Performance Quality Technician

Artificial Intelligence • Computer Vision • Hardware • Machine Learning • Robotics • Software • Agriculture
Easy Apply
Remote or Hybrid
26 Locations
350 Employees
75K-85K Annually

Invenergy Logo Invenergy

Senior PI Administrator

Greentech • Real Estate • Social Impact • Energy • Industrial • Solar • Renewable Energy
In-Office or Remote
18 Locations
2500 Employees
125K-155K Annually

Pfizer Logo Pfizer

Digital Operations Agentic Lead - Senior Manager

Artificial Intelligence • Healthtech • Machine Learning • Natural Language Processing • Biotech • Pharmaceutical
Remote or Hybrid
29 Locations
121990 Employees

Similar Companies Hiring

Hanover Park Thumbnail
Artificial Intelligence • Fintech • Software • Financial Services
New York, New York
42 Employees
Kepler  Thumbnail
Fintech • Software
New York, New York
6 Employees
Onshore Thumbnail
Artificial Intelligence • Fintech • Software • Financial Services
New York, New York
60 Employees

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account