Operational Risk Manager, Line 1

• Support the maintenance of the Operations Risk Framework, including coordinating risk assessments, maintaining the Operations Risk Register, producing risk reporting, tracking KRIs and supporting governance forums.
• Provide Line 1 risk oversight for Operational Readiness activities, including reviewing material readiness assessments, challenging residual risk positions and escalating unresolved risks where required.
• Support operational resilience activities, including BCP, DRP, scenario testing, critical operations, dependency artefacts, CPS 230 material service provider evidence and trustee reporting inputs.
• Coordinate operational activities for GS 007 and other assurance reviews, including supporting control owners with documentation, evidence standards, walkthroughs and testing.
• Track audit findings, management actions and remediation items through to closure, ensuring strong follow-through and accountability.
• Support the mapping of risks, controls, regulatory obligations, contractual obligations and trustee requirements, while helping maintain traceability between incidents, controls, assurance findings and remediation initiatives.
• Analyse incidents, audit findings and recurring risk themes to identify opportunities for process improvement, automation, technology uplift and broader operational improvement.
• Partner with internal stakeholders across Operations Leadership, Technology, Product, Risk and Compliance, Internal Audit, Project Delivery and the COO Office.

• 5+ years’ experience in Operational Risk, Controls Assurance or Business Risk, ideally gained within financial services.
• Experience supporting risk frameworks, control environments, incident management, assurance reviews and governance reporting.
• Strong stakeholder engagement and written communication skills, with the ability to support governance forums, action tracking and evidence coordination.
• Confidence to challenge assumptions and residual risk positions in a constructive, business-focused way.
• Strong analytical skills, attention to detail and sound judgement when assessing controls, obligations, client outcomes and resilience impacts.
• A practical, outcomes-focused approach, with the ability to translate risk themes into meaningful business actions and improvement opportunities.
• A collaborative and accountable working style, with the discipline to track remediation actions through to closure.

Desirable experience

• Exposure to CPS 230 and operational resilience.
• GS 007 or ASAE 3402 experience.
• BCP or DRP knowledge.
• Experience using Protecht or a similar GRC platform.
• Wealth, platform or superannuation industry experience.