Senior Process Risk and Controls Manager

About the role

Bupa is looking for a Senior Process, Risk & Controls Manager to lead its Capability Modernisation Program. The role shapes a more resilient, efficient and member-centric operating model by designing, implementing and embedding the future-state control environment, working with operations, claims integrity, technology, architecture, cyber, risk and compliance teams. The position is based in Melbourne or Adelaide.

Key responsibilities

• Lead the design of end-to-end controls and embed control-by-design principles, considering risks and segregation of duties during process redesign
• Develop the target control strategy and framework, transition from manual detective controls to automated preventative ones and remove redundant legacy controls
• Design continuous monitoring and exception-based controls, and define automated control requirements for system configuration
• Partner with Technology, Enterprise Architecture and Delivery teams to embed automated controls into workflows, approvals, reconciliations, validations and payments, and strengthen identity and access management, audit logging and data quality controls
• Ensure processes meet APRA prudential standards, privacy and private health insurance legislation, AML obligations, the internal risk framework and Internal Audit expectations
• Develop the control implementation roadmap, standards and design principles, and oversee design effectiveness assessments and operating effectiveness testing before and after go-live
• Provide risk and control leadership across program workstreams, review designs and escalate material design risks to Program Steering Committees

Required profile

• Extensive experience in operational risk, controls or governance in financial services, health insurance or large-scale transformation environments
• Demonstrated experience designing and embedding future-state control environments, including automated controls in digital platforms
• Strong understanding of operational process design, control frameworks and risk-based governance
• Experience partnering with technology, architecture and business stakeholders
• Knowledge of APRA prudential standards, including CPS 230 and CPS 234
• Proven stakeholder management across senior and cross-functional groups

Preferred qualifications

• Tertiary qualification in Business, Commerce, Risk, Information Systems or a related discipline
• Risk, governance, accounting or process improvement qualifications such as IRM, GRC, CRISC, RIMS, RMIA, CPA, Chartered Accountant or Lean Six Sigma
• Experience with BPMN or process modelling tools