Senior Manager- Identity Oversight

Organization :- At CommBank, we never lose sight of the role we play in other people’s financial wellbeing. Our focus is to help people and businesses move forward to progress. To make the right financial decisions and achieve their dreams, targets, and aspirations. Regardless of where you work within our organisation, your initiative, talent, ideas, and energy all contribute to the impact that we can make with our work. Together we can achieve great things.

Job Title :- Senior Manager- Identity Oversight

Location : - Bangalore

Business & Team :-

The Identity and Access Technology (IAT) Teams are an integral part of the wider Group Security practice. IAT consists of 3 Crews focused on Identity Lifecycle Management, Workforce Authentication and Privileged Access Management. These Crews are supported by 3 enabling teams, focused on Identity Adoption, Oversight and Access Design. Together they deliver a range of critical services to the organisation ensuring our staff and partners have the right access, to the right systems, at the right times.

The Identity Oversight team is tasked with forming a continuous objective view of the control landscape (DE/ OE) for Identity and Access technology, based on existing data, reports and self-assessments. This view will be supplemented via independent testing (automated and/ or manual), confirming a level of process effectiveness prior to any independent review. The team will also coordinate action plans across the applicable Identity teams to ensure that risks/ observed deviations are being managed and remediated in-line with committed timeframes. The team will work closely with key stakeholders including, but not limited to our Chief Controls Office (CCO), Risk and Audit teams.

Impact & contribution :- ​

• You have experience with Identity and Access Management (IAM) concepts and technologies.
• You are an experienced Technology leader with an IT audit, internal controls and/or risk management background.
• We are one of the largest cybersecurity team in Australia 
• Together we’ll build tomorrow's bank, using world-leading engineering, technology & innovation 

Roles & Responsibilities :-

• Translation of Identity controls, standards, and guidelines to the technology and operational processes that deliver these (controls, standards, guidelines).
• Collation of applicable data points, metrics, and reports to understand current control status (both DE and OE) and where potential testing gaps exist.
• Develop and Execute test plans (either programmatically or manually) to understand the status (of observed gaps) and potential impacts to control effectiveness.
• Liaise with applicable control owners and technology crews to prioritise and address noted findings.
• Form a detailed view of control operations and processes – e.g., review of scripts, queries, extracts, processes, and procedures.
• Proactively conduct self-assessments across the Identity estate.
• Work with Assurance functions (Line 2, 3) in collating evidence requests, conducting workshops, supporting walkthroughs, and drafting management responses.
• Provide a consolidated view of controls operated by Identity.
• Contribute to actionable insights that can be aid with BUIT prioritisation.
• Drive remediation activities noted by centralised testing teams where findings are applicable to Identity controls and/ or processes.
• Work closely with key stakeholders to ensure alignment, specifically our Chief Controls Office (CCO).
• Support (and input into) the organisational focus on enhanced control testing automation (ACAA), as governed by our CCO teams.
• Work with teams across Line 1, 2, 3 in collating existing test findings (CAP), evidence requests, conducting workshops, supporting walkthroughs, and drafting management responses.

Essential Skills :

• Experience :- 14+ Years
• Strong Identity and Access Management knowledge (of processes and key technology).
• Experience in IT audit (with a strong IAM focus), internal controls and/ or risk management.
• Experience performing IT general controls, technology risk assessments, testing or auditing against technology standards or governance frameworks.
• Experience leading/ contributing to internal and external (statutory) audits.
• Strong data skills, with automation experience (demonstrating a reduction in manual effort in executing test cases).
• Very strong written and communication skills.

Qualifications:

Bachelor’s degree or Master’s degree in Engineering in any stream

Advertising End Date: 29/09/2024