Senior Manager - Fraud and Scams Risk, x15ventures

About this role

The opportunity

Who we are

x15ventures operates in the space between corporate and startup. We help build and scale digital ventures, giving teams the freedom to move quickly while maintaining the safety, security and resilience expected of businesses connected to CommBank.

Our Security team is small, agile and cross-functional. We work across x15 and its portfolio of ventures, helping teams understand their risks, make informed decisions and build practical controls into their products and operations.

Where do you fit?

As the Fraud & Scams Lead, you will be x15’s subject matter expert for fraud and scams risk.

You will partner with ventures at different stages of maturity, from early product design through to established and scaling businesses. You will help teams understand how fraud and scams could affect their customers, products and operations, and work with them to put proportionate controls in place.

This is a senior individual contributor role with broad influence across x15. Much of your work will involve advisory, reviews, risk assessments and constructive challenge. You will not own every fraud risk or control. Your role is to make sure risks are understood, decisions are well informed and ventures have a clear path to managing material exposure.

The role is primarily focused on fraud and scams, but you will also contribute to the broader Security team. We are looking for someone who is comfortable building their cyber security knowledge and leaning into adjacent security risks when needed.

In this role, you will

• Act as the primary fraud and scams adviser to venture leaders, product teams, engineers, operations, risk teams and executives.
• Lead fraud and scams risk assessments for new ventures, products, customer journeys, partnerships and material changes.
• Review the design and effectiveness of controls across the customer and transaction lifecycle. This may include identity verification, onboarding, authentication, account access, payments, transaction monitoring, customer interventions, reporting, complaints and recovery.
• Support ventures identify and respond to relevant fraud and scam typologies, including identity fraud, account takeover, payment fraud, first-party misuse, platform abuse, impersonation and social engineering.
• Assess how Australian laws, regulatory expectations, industry standards and CommBank Group requirements apply to x15 and individual ventures. This includes recognising that obligations may differ depending on the entity, product and service involved.
• Maintain a current view of the Australian fraud and scams regulatory environment, including the Scams Prevention Framework and its sector codes and rules, ASIC and ACCC expectations, and relevant consumer, financial services and complaints obligations.
• Translate complex requirements and threat information into clear, practical advice that venture teams can implement.
• Produce concise risk assessments, control reviews and recommendations that clearly explain the issue, customer impact, likelihood, consequence, existing controls and residual risk.
• Partner with ventures to develop proportionate control uplift plans, balancing risk reduction, customer experience, commercial impact and delivery effort.
• Provide constructive challenge where controls or risk decisions are not appropriate, and support accountable leaders to make and document informed risk decisions.
• Develop reusable standards, control patterns, assessment methods and playbooks so common fraud and scams risks can be managed consistently across the portfolio.
• Analyse fraud and scams trends, incidents, intelligence and control performance to identify emerging risks and prioritise areas for improvement.
• Support significant fraud or scam incidents, including impact assessment, investigation support, root-cause analysis and identification of control improvements.
• Work closely with CommBank fraud, scams, cyber security, legal, compliance and risk teams where shared capabilities, intelligence, dependencies or Group requirements apply.
• Build effective relationships with relevant external partners, vendors and industry groups where this improves x15’s capability or understanding of emerging threats.
• Contribute to broader cyber security advisory, assurance and risk activities, particularly where fraud, identity, data and cyber threats overlap.

We are interested in hearing from people who have

• Strong practical experience in fraud and scams risk management, ideally within financial services, fintech, payments, digital platforms or another customer-facing digital business.
• Experience conducting fraud risk assessments, reviewing controls and advising product or business teams on risk treatment.
• A sound understanding of the Australian fraud and scams environment, including relevant regulatory expectations and industry developments.
• The ability to assess how requirements apply to different legal entities, products and operating models rather than applying a single standard without considering context.
• A strong understanding of customer journeys and how fraud controls can affect customer experience, accessibility, conversion and operational workload.
• Experience working with fraud controls such as identity verification, authentication, payment controls, monitoring, detection, customer warnings or case management.
• Strong analytical judgement, including the ability to work with incomplete information, identify material risks and distinguish urgent issues from lower-priority improvements.
• Clear written and verbal communication skills. You can explain complex risks in plain English to technical and non-technical audiences.
• The confidence to influence and challenge senior stakeholders while maintaining strong working relationships.
• The ability to work independently, manage competing priorities and adapt your approach across ventures with different products, customers and levels of maturity.
• A practical mindset. You are comfortable working in a lean team and finding solutions that improve risk outcomes without creating unnecessary process or bureaucracy.
• An interest in cyber security and a willingness to build capability in adjacent areas such as identity security, incident response, threat modelling and security assurance.

Useful, but not essential

• Experience with fraud detection platforms, decisioning systems, transaction monitoring or fraud analytics.
• Experience in fraud operations, investigations, intelligence or incident response.
• Knowledge of identity fraud, account takeover, social engineering, mule activity, payment fraud or digital platform abuse.
• Experience with risk and control self-assessments, control testing, assurance or audit activities.
• Experience working in a startup, scale-up or product-led technology environment.
• Experience working with regulators, law enforcement, industry bodies or cross-industry fraud and scams forums.
• Familiarity with cyber security risk frameworks, cloud environments or security control assessments.

What success looks like

• Ventures involve Security early when developing products, partnerships and customer journeys.
• Fraud and scams risks are clearly understood, owned and reflected in business decisions.
• Material control gaps have practical, prioritised and accountable remediation plans.
• Controls reduce customer harm without creating unnecessary friction or slowing delivery without good reason.
• Common risks are addressed through reusable guidance and control patterns rather than solving the same problem separately in every venture.
• Venture teams see the Security function as a practical partner that helps them move safely and make better decisions.

Why join us?

You will have the opportunity to shape fraud and scams capability across a diverse portfolio of digital ventures, rather than working within a single product or control environment.

About fraud prevention roles for ex-police

Fraud investigation, detection and financial-crime roles in banks, insurers and public bodies. Detective and economic-crime backgrounds map straight across, often with hybrid working and clear progression.