Operational Risk and Resilience Consultant - (Canberra/Sydney)

Job Title: Operational Risk and Resilience Consultant 

Job Type: Permanent/Full Time

Reporting To: Head of Risk

Location: Canberra Preferred/ Sydney

3 days in office. Central CBD Office locations in Canberra and Sydney. 

About the role

The Operational Risk and Resilience Consultant provides strategic direction and practical oversight of CSC’s operational risk and resilience frameworks. The role supports CSC to identify, assess, monitor and remediate operational risks; maintain critical operations within Board-approved tolerance levels during severe disruptions; and strengthen business continuity, disaster recovery, crisis management and material service provider resilience. The role works closely with senior leaders, business units, Technology, Finance, including Procurement, and external partners to embed relevant prudential requirements into business-as-usual risk and resilience practices.

Key responsibilities

• Oversee the identification, assessment, monitoring and remediation of operational risks across CSC, including risks arising from critical operations, technology, data, cyber, change, third parties and emerging threats.
• Lead the continuous improvement of CSC’s operational risk and resilience frameworks, including business continuity, disaster recovery, incident response and crisis management.
• Embed applicable prudential requirements, including CPS 230, CPS 234 and SPS 220, into operational risk, business continuity, service provider and resilience practices.
• Maintain CSC’s Business Continuity Management framework, including business impact analyses, business continuity plans, recovery strategies and exercise outcomes.
• Support the identification of critical operations and work with business owners to define, maintain and report against tolerance levels for disruption.
• Provide analysis, advice and training to build business resilience awareness and strengthen operational risk control design and effectiveness.
• Coordinate the annual BCM, disaster recovery and crisis management exercise program, ensuring scenarios, outcomes, lessons learned and remediation actions are documented and tracked.
• Support the CPS 230 uplift initiative by embedding expectations for critical operations, tolerance levels, scenario testing and material service provider resilience into the Risk Management Framework.
• Partner with Finance, including Procurement, Technology and business owners to assess and monitor material service provider resilience, including due diligence, contractual obligations, performance monitoring, contingency arrangements and exit planning.
• Prepare concise, evidence-based reporting for senior management, the Executive Team, Board and Risk Committee on operational risk, resilience, incidents, service provider risks and remediation progress.
• Monitor developments in operational resilience, technology resilience, cyber risk, third-party risk and financial services regulation, and translate relevant changes into practical framework, policy and control improvements.
• Identify gaps in policies, procedures, controls, testing, assurance and supporting documentation, and drive uplift opportunities across operational risk and resilience frameworks.

Specific duties, deliverables and reporting lines may vary from time to time depending on business needs and priorities. Key objectives and measurements will be captured in the Performance and Development planning cycle, established annually and adapted as needed.

What we’re looking for

• Undergraduate degree complementing skill set is essential, and a postgraduate will be advantageous. 
• Minimum 7+ years of experience in operational risk management, business continuity, operational resilience or related financial services risk roles.
• Direct experience developing business impact analyses, business continuity plans, recovery strategies, disaster recovery exercises and scenario testing.
• Practical experience identifying critical operations, mapping dependencies, setting tolerance levels and monitoring resilience outcomes.
• Working knowledge of CPS 230, CPS 234, SPS 220, ISO 31000, ISO 22301 and related operational resilience, cyber, incident and service provider risk expectations.
• Experience supporting material service provider risk management, including due diligence, resilience assessment, performance monitoring, contingency planning and issue remediation.
• Proven capability to develop Board and senior management reporting that is concise, evidence-based and focused on risk, resilience and remediation outcomes.
• Proven capability to navigate new prudential requirements and drive practical change with direct and indirect stakeholders in a complex operating environment.

• Permanent role with flexible and hybrid work options
• Enhanced parental leaves
• An opportunity to create an impact in a newly created role

What you’ll get in return

A career where you belong

At CSC, we’re committed to more than super — we’re committed to people. That means creating a workplace that values diversity, promotes equity, and fosters inclusion across everything we do.

Our gender equality strategy is more than a promise — it’s a plan. We're actively increasing representation in our workforce, removing barriers to career progression, and creating pathways for all employees to grow and succeed.

We welcome candidates of all genders, cultural backgrounds, ages, sexualities, and abilities. We offer flexible work, inclusive policies, and development opportunities designed to support you at every stage of your career.

We’re proud to be an equal opportunity employer — and proud of the progress we’re making. Join a workplace where you can thrive, grow, and belong.
 

To apply for this opportunity, please submit your application via the Apply link in this advertisement, including a short cover letter along with your current resume.

To ensure all applications are considered in the review process, we request you to please apply through the advertised links only.

Applications close:  11th Sep 2026, EOD.