Senior Manager, CCO Engineering, SRE and Tech Risk

Organization:

At CommBank, we never lose sight of the role we play in other people's financial wellbeing. Our focus is to help people and businesses move forward to progress. To make the right financial decisions and achieve their dreams, targets, and aspirations. Regardless of where you work within our organisation, your initiative, talent, ideas, and energy all contribute to the impact that we can make with our work. Together we can achieve great things.

Job Title:Senior Manager, CCO Engineering, SRE and Tech Risk
Location: Manyata Tech Park, Bangalore

Business & Team:

The Technology Chief Controls Office (CCO) team is a Line 1 risk team responsible for supporting CBA in continuing to mature its risk culture and establish and maintain strong risk practices. Technology CCO is responsible for providing end to end risk advice and guidance. We support our delivery teams across CommBank in their development and operation of solutions ranging across innovative product platforms for our customers to essential tools within our business.

Impact & Contribution:

The Technology Chief Controls Office (TCCO) is a Line 1 risk which support Technology to deliver Safe, Sound and Secure outcomes for our customers and the community. CCO provides enablement support through risk management frameworks and tools, risk expertise and coaching, a greater preventative focus rather than detective, risk processes that are simple and easy to apply.

This role sits within the Chief Technology Office (CTO) Centre of Excellence of TCCO and partners closely with stakeholders across Technology Risk, Site Reliability Engineering (SRE), Global Service Management (GSM), and the Engineering Platform to strengthen and drive effective Technology Risk Management.

You will play a critical leadership role at the intersection of technology, risk, and AI-enabled transformation, uplifting controls, resilience, and risk culture across some of the most critical technology in the Group.

The CTO provides the technology backbone of the bank, enabling reliable, secure, and scalable platforms that power innovation, resilience, and great customer outcomes.

See yourself in our team

The Technology Chief Controls Office collaborates with business and technology leaders, including Engineers, Product Owners, Control Leads, Crew and Crew Tech Leads, SREs and Cyber to identify and manage technology and operational risks effectively.

You'll play a senior leadership role within a high-performing team accountable for strengthening, embedding, and continuously improving the risk and control environment across Technology. You will operate as a trusted advisor to senior leaders, shaping how risk and controls are embedded into modern engineering, platform, and AI-enabled environments, while contributing to broader organisational strategy and uplift

Together we:

Create a workplace where everyone belongs, feels safe to experiment and learn, and is empowered to bring their best. We're a tight knit community that celebrates diverse perspectives and support each other to grow, adapt and thrive.

Lead the next generation of risk by combining innovation, data-driven insight and partnership to anticipate tomorrow's risks today and protect our customers and the bank.

Work hand-in-hand with technologists to embed risk into how we build and deliver with velocity. For us, risk isn't a checkpoint - it's a design principle.

Build future fit capability, broaden opportunities, and connect you globally -empowering you to grow your career and make meaningful impact. Your growth is part of our growth.

Roles & Responsibilities:

Enterprise Leadership & Influence

• Act as a trusted advisor to senior leaders, influencing decisions across Technology, Risk, and Engineering domains

• Lead through influence, ambiguity, and complexity, shaping outcomes in a complex environment

• Build and sustain deep, trust-based relationships across Technology, Risk, Cyber, and Business stakeholders

AI & Future-Focused Risk

• Lead the identification and adoption of AI and advanced analytics to enhance risk detection, control effectiveness, and operational efficiency

• Drive the evolution of intelligence-led risk management, leveraging predictive insights and data-driven decision-making

Control Strategy & Uplift

• Oversee the design and evolution of Technology controls, ensuring they are scalable, effective, and aligned to modern engineering practices

• Champion simplification, automation, and standardisation, reducing complexity and improving control efficiency

• Advise business leaders on fit-for-purpose control design for new and evolving processes and technologies

Systemic Improvement & Capability Uplift

• Drive a forward-looking, systemic approach to risk management, identifying patterns, trends, and root causes across domains

• Coach and uplift team capability, enabling others to proactively identify, manage, and mitigate risk

• Embed a culture of continuous improvement and resilience, aligned to SRE and platform principles

Executive Insight & Decision Support

• Deliver clear, concise, and actionable insights to senior stakeholders and executives

Translate complex technical and risk information into strategic narratives that inform decision-making

Essential Skills:

• Experience of risk and/or control advisory in banking/financial services/professional services other relevant sector, and/or minimum 10+ years experience in Technology, Cyber or Operational Risk practitioner roles

• Strong technology background across Engineering, Platform, SRE, and Technology Risk

• Experience applying or advising on AI/ML, automation, or advanced analytics, including understanding of Responsible AI and data ethics

• Proven ability to influence senior stakeholders (GM/EM level) and operate effectively in complex, matrixed environments

• Demonstrated experience in designing and uplifting controls within large, complex organisations

• Strong strategic and analytical thinking, with a data-driven approach to identifying risk and opportunities

• Ability to build trusted relationships and communicate complex concepts clearly to both technical and non-technical audiences

• Understanding of operational and compliance risk frameworks (e.g. NIST, ISO, CPS 230/234 advantageous)

• Strong business and commercial acumen within a technology-led organisation

Education Qualification:

• Bachelor's degree/master's degree in engineering in Computer Science/Information Technology or other relevant area

• Professional certificates like CIPP (E/A), CIPM, CIPT, CISA, CRISC, CGEIT, CISM, ITIL, COBIT or other IT Risk related certifications (e.g. Basel II, GS007, AS3402, ISO2700x) will be preferred