Job Summary

The Senior Manager – Operational Risk & Assurance is responsible for strengthening the organisation’s operational risk and control environment. The role provides risk advisory, assurance and governance support across business operations, technology change, third-party arrangements and strategic initiatives.

The position will lead operational risk assessments, control design and effectiveness testing, risk framework improvements, incident management and executive reporting. The role will work closely with senior stakeholders to identify emerging risks, address control weaknesses and ensure that remediation activities are delivered effectively.

Key Responsibilities

• Lead operational risk assessments across business processes, technology changes, transformation initiatives, outsourcing arrangements and strategic projects.
• Design, review and test key controls, including assessing control design and operating effectiveness, identifying gaps and recommending practical remediation actions.
• Maintain and enhance risk profiles, risk registers, incidents, issues, high-risk actions, risk appetite statements and key risk indicators.
• Plan and deliver risk-based assurance reviews, producing clear findings, recommendations and reports for senior management and governance forums.
• Provide risk advisory support for business, regulatory and technology change, ensuring operational, compliance and control requirements are addressed throughout delivery.
• Oversee risk governance processes, including incident management, action tracking, remediation monitoring, business continuity planning and operational resilience activities.
• Build strong relationships with senior leaders, business teams, technology, compliance, audit and external providers, translating complex risk matters into practical business advice.
• Lead, coach and develop risk and assurance professionals, supporting recruitment, onboarding, performance management, quality assurance and capability development.

Skill Requirements

Desirable

• Experience working in both first-line risk and internal audit functions.
• Knowledge of relevant APRA, ASIC and financial-services regulatory requirements.
• Experience with outsourcing, third-party risk and cloud-based technology arrangements.
• Experience with GRC platforms such as IBM OpenPages, ServiceNow, DRATA or equivalent systems.
• Experience supporting complaints management, customer remediation or responsible-banking programs.
• Exposure to artificial intelligence or technology-enabled non-financial risk solutions.

Other Requirements

• Tertiary qualification in commerce, finance, business information systems, risk management, accounting or a related discipline.
• At least 10 years of experience in operational risk, controls assurance, internal audit, compliance or business governance.
• Significant experience within banking, financial services or another highly regulated industry.
• Strong knowledge of operational risk management principles and frameworks.
• Demonstrated experience conducting risk assessments and control design and operating-effectiveness testing.
• Experience preparing risk reviews, assurance reports and executive-level governance reporting.
• Strong understanding of incident, issue, action and remediation management.
• Experience supporting business, technology or regulatory transformation programs.
• Demonstrated ability to lead teams and manage multiple concurrent priorities.