Analyst – Technology Control Assurance

Organization

At CommBank, we never lose sight of the role we play in other people’s financial wellbeing. Our focus is to help people and businesses move forward to progress. To make the right financial decisions and achieve their dreams, targets, and aspirations. Regardless of where you work within our organisation, your initiative, talent, ideas, and energy all contribute to the impact that we can make with our work. Together we can achieve great things.

Job Title: Analyst – Technology Control Assurance, Tech CCO

Location: Bangalore

Business & Team: Tech CCO

Technology is responsible for the world leading application of technology across every aspect of CommBank, from innovative product platforms for our customers to essential tools within our business.

The Chief Controls Office (CCO) is responsible for ensuring that the business effectively manages non-financial risks, is aligned with fair outcomes for customers and responds to changing Board and regulatory expectations. The CCO function has the mandate to ensure the business has the right people, processes and systems to operationalise its conduct and controls arrangements, thereby enabling the business to deliver on the Group’s vision and values.  

Technology CCO (TCCO)’s purpose is to ensure our technologists have the capabilities to effectively manage non-financial risks and provide secure and always available technology products and services to our customers.

The TCCO Controls Assurance Domain works closely with Control Stewards and owners of data/tooling to modernise, simplify and assure the Group’s Technology Controls Library. This includes a program of work to deliver controls assurance automation of 45+ controls and 60,000+ instances owned by various areas across the Bank. In parallel, the Domain ensures that the current control environment is being effectively managed with robust treatment plans for any uplifts, risks (current and emerging) are transparent and key strategic objectives are enabled through simple and proactive risk advice and assessment.

We do this through:

1. Building valued, proactive relationships with our Control Stewards, Data Enablers, Technology CIOs, TCCO functions, Risk (line 2) and Group Audit & Assurance (Line 3) partners.

2. Enabling the delivery of the Technology and broader Group’s strategy through timely, balanced risk advice and assessment, and controls assurance

3. Growing the capability of our TCCO function through bar raising education and development of our people

4. Continuously improving our methods, practices and assurance through innovation to enable a modern, future fit control function

5. Actively participating in TCCO and Technology’s leadership to motivate and support each other, our teams and stakeholders

Impact & Contribution

As an Analyst, you will contribute to the delivery of technology and cyber controls assurance that is evidence-based, data-informed and aligned to the Technology Controls Library. 

You will support control testing activities, assist with indicator design and codification, analyse evidence and outcomes, and help prepare clear reporting for stakeholders.

You will work with managers, control owners, engineers, risk partners and assurance teams to identify control gaps, support root cause analysis, and track agreed actions to closure.

You will drive the identification of control indicators, its design and codification to provide reasonable assurance on the 50+ Information Technology General Controls (ITGCs) within your remit Group-wide.

You will actively champion and drive the continuous improvement of the risk culture and mindset across Technology, successfully partnering with key stakeholders in Technology to enable them to safely achieve their current and target state objectives.

Roles & Responsibilities:

• Execute assigned control testing and assurance activities in line with agreed methodology, timelines and quality expectations. 
• Collect, review and assess evidence to support design and operating effectiveness testing of technology controls. 
• Support the identification, definition and documentation of control indicators, including manual indicators and automated assurance logic. 
• Assist with data analysis, reconciliations, sampling, exception review and documentation of test outcomes. 
• Identify potential control gaps, weaknesses or evidence issues and escalate clearly with supporting rationale. 
• Contribute to root cause analysis and support remediation tracking, including action updates and closure evidence. 
• Prepare clear working papers, testing summaries and stakeholder-ready reporting packs. 
• Use Agile ways of working to manage assigned tasks, update progress, raise blockers and support sprint outcomes. 
• Partner with Technology SMEs, Control Owners and Data SMEs to clarify control intent, evidence requirements and testing criteria. 
• Support continuous improvement of assurance practices through automation, reusable templates, dashboards and control rationalization opportunities. 
• Maintain a proactive risk and control mindset, aligned to CommBank values and expected conduct. 

Essential Skills

• 2 to 5 years of experience in any of the following areas: technology risk, controls assurance, audit, compliance, cyber security, operational risk. 
• Foundational understanding of risk and control concepts, including control design, operating effectiveness, evidence assessment and issue management. 
• Strong analytical skills and attention to detail, with the ability to interpret evidence, data outputs and stakeholder responses. 
• Clear written and verbal communication skills, including the ability to document outcomes in concise, audit-ready language. 
• Ability to manage assigned work, meet deadlines, provide proactive updates and raise risks or blockers early. 
• Comfort working collaboratively with Technology, Risk, Assurance and business stakeholders.