See yourself in our team:

CommBank is recognised as leading the industry in IT and operations with its world-class platforms and processes, agile IT infrastructure, and innovation in everything from payments to internet banking and mobile apps.

The HR Chief Controls Office is a CCO function (HR CCO) which supports a number of business functions, such as Workplace Analytics, Payroll, Talent Management, Talent Acquisition, and Diversity and Culture.

The HR CCO is responsible for ensuring that strong controls are in place and decisions are well informed, timely and socialised. They achieve this through providing an end to end risk and control service, including the effective design & implementation of controls and ensuring the operational risk & compliance frameworks are effectively implemented in HR.

The Privacy function in the HR Controls Office is responsible for supporting various Business and Support Units in identifying, assessing, and helping manage the privacy risks inherent in providing a range of services to the wider CBA Group. This means the exposure will not contained to HR processes and activities, but also functions such as Group Investigations, Customer and Community Advocacy, and Subsidiaries of CommBank.

Do work that matters:

The Risk & Control Advisory & Delivery team is responsible for ensuring that strong controls are in place and decisions are well informed, timely and socialised. They achieve this through providing an end to end risk and control service, including the effective design & implementation of controls, ensuring the operational risk & compliance frameworks are effectively implemented in their BU’s and also ensuring each BU LT has the right level of comfort and governance within their risk environment.

This role specialises in managing risk relating to the Handling of Personal Information and Records Management. It focuses on Privacy, Data Protection, Operational effectiveness and Records Management. Additionally, it will venture into emerging realms as AI and Privacy Enhancing Technologies (PETs).

This role will report to the Senior Privacy Manager Risk and Control Advisory and Delivery.

A key responsibility for this role includes:

You will be expected to perform the following tasks in a manner consistent with CBA's Values and People Capabilities:

• Responsible to design, implement, operate and test controls and processes in place to mitigate privacy risks, in compliance with Group Privacy Policy, the Group Privacy Standard and other existing frameworks and guidance;
• Manage privacy issues and incidents in line with CBA Risk Management and other relevant frameworks;
• Responsible to design, implement, operate and test processes and controls that ensure the completion of Privacy Impact Assessments (PIA) / Data Protection Impact Assessments (DPIA) in line with appropriate trigger points and relevant frameworks and guidance;
• Responsible to manage 3rd party supplier privacy risks in line with relevant frameworks and guidance (e.g. Supplier Risk Governance and Group Privacy Standard);
• Responsible for ensuring effective design of controls for all new and changing processes and operations, and support the business through the implementation;
• Provide senior stakeholders with insights and suggested actions with regard to Privacy risks, controls, issues, incidents and other privacy and data management related matters;
• Support the design and delivery of Group and BU/SU privacy initiatives to ensure the achievement of transformation objectives within the BU/SU;

We're interested in hearing from people who have:

• Knowledge of Operational and Compliance Risk frameworks is advantageous
• National and International privacy law experience is advantageous
• Controls design experience is advantageous
• 1-3 years’ experience in Privacy, Law, Information Management, Data Science, Risk management, and/or banking/financial services.

If you are an experienced professional with a desire to take on complex work/projects then we would love to hear from you!