Senior Manager Cloud Risk

Senior Manager – Cloud Risk Location: Sydney, NSW, Australia | Salary: A$180,000 - A$200,000 CBA’s Technology team is building tomorrow’s bank today. Cloud technologies are a strategic enabler, and the Cloud Enablement and Engineering team is seeking a highly skilled Cloud Risk Specialist to join our multidisciplinary team. As Senior Manager – Cloud Risk, your primary focus is to address the complexity of CPS230 and support our cloud risk strategy, translating resilience requirements for cloud platforms, managing senior stakeholders, and mitigating emerging risks as workloads migrate to AWS Cloud. Key Responsibilities Embed Technology Controls in Cloud Platforms Ensure technology controls (IAM, logging, encryption, network security, monitoring) are implemented and consistently applied across all cloud landing zones. Identify emerging risks associated with migration of critical workloads to cloud. Drive embedding of controls across AWS, Azure and GCP platforms. Work closely with engineering teams to ensure control effectiveness, automation, and continuous improvement. Operational Resilience & CPS230 Compliance Interpret and operationalise CPS230 requirements for cloud platforms, particularly for AWS as a material supplier. Translate resilience and operational risk obligations into actionable requirements for engineering and product teams. Drive initiatives to uplift cloud resilience, ensuring adherence to regulatory expectations and industry best practices. Monitor the cloud risk landscape and ensure risk tolerances and controls remain effective as the environment evolves. Manage Stakeholders & Influence Senior Leaders Engage, influence and provide guidance to senior technology, risk and business stakeholders on cloud risk matters. Communicate complex regulatory and cloud risk concepts in a clear and actionable manner to senior leaders. Support decision‑making regarding cloud controls and resilience posture. Partner Across Risk, Cyber, Architecture & Cloud Teams Act as a central point of expertise, collaborating with Cyber Security, Architecture, Line 1 and Line 2 Risk, cloud product owners, and engineering teams. Drive cross‑functional alignment to ensure risks are understood and addressed holistically. Facilitate knowledge sharing and uplift in cloud risk awareness across the organisation. Support the Enterprise Risk Community Provide guidance and support to risk managers across the bank on cloud risk topics. Help uplift cloud risk capability across the broader risk community. Contribute to building a strong cloud risk culture and supporting effective technology risk management across CBA. Present your work to peers in your immediate team and the broader Risk, Cyber and Engineering community. Qualifications & Skills Experience working in large‑scale, regulated financial institutions or other APRA‑regulated environments. Cloud knowledge, experience working with AWS preferred; experience with Azure and other cloud technologies considered. Advanced certifications (e.g., AWS Certified Security – Specialty) are a plus. Deep understanding of AWS services, architectures, and associated security risks. Familiarity with operational resilience and regulatory frameworks (e.g., CPS 230) and their implications on cloud platforms. Knowledge of cloud automation, DevSecOps practices or infrastructure‑as‑code (IaC) such as Terraform, CloudFormation. Strong analytical, critical thinking and problem‑solving skills, with the ability to communicate complex security concepts to technical and non‑technical audiences. Excellent communication skills and proven stakeholder engagement skills. Proven ability to plan and work on outcomes, and to improve processes leading to automation of risk and control assessment in cloud. If you are passionate about cloud security, possess a deep understanding of current and emerging cloud‑related risks, and thrive in a collaborative and innovative environment, we invite you to apply for this challenging and rewarding position. Please note: Our Talent Acquisition team will take a scheduled break over the festive period beginning 19 December. We will resume reviewing applications and responding to enquiries from January 2026. We appreciate your understanding and patience during this time and wish you a safe and enjoyable holiday season. #J-18808-Ljbffr