x15ventures operates in the space between corporate and startup. We help build and scale digital ventures, giving teams the freedom to move quickly while maintaining the safety, security and resilience expected of businesses connected to CommBank.
Our Security team is small, agile and cross-functional. We work across x15 and its portfolio of ventures, helping teams understand their risks, make informed decisions and build practical controls into their products and operations.
As the Fraud & Scams Lead, you will be x15’s subject matter expert for fraud and scams risk.
You will partner with ventures at different stages of maturity, from early product design through to established and scaling businesses. You will help teams understand how fraud and scams could affect their customers, products and operations, and work with them to put proportionate controls in place.
This is a senior individual contributor role with broad influence across x15. Much of your work will involve advisory, reviews, risk assessments and constructive challenge. You will not own every fraud risk or control. Your role is to make sure risks are understood, decisions are well informed and ventures have a clear path to managing material exposure.
The role is primarily focused on fraud and scams, but you will also contribute to the broader Security team. We are looking for someone who is comfortable building their cyber security knowledge and leaning into adjacent security risks when needed.
Act as the primary fraud and scams adviser to venture leaders, product teams, engineers, operations, risk teams and executives.
Lead fraud and scams risk assessments for new ventures, products, customer journeys, partnerships and material changes.
Review the design and effectiveness of controls across the customer and transaction lifecycle. This may include identity verification, onboarding, authentication, account access, payments, transaction monitoring, customer interventions, reporting, complaints and recovery.
Support ventures identify and respond to relevant fraud and scam typologies, including identity fraud, account takeover, payment fraud, first-party misuse, platform abuse, impersonation and social engineering.
Assess how Australian laws, regulatory expectations, industry standards and CommBank Group requirements apply to x15 and individual ventures. This includes recognising that obligations may differ depending on the entity, product and service involved.
Maintain a current view of the Australian fraud and scams regulatory environment, including the Scams Prevention Framework and its sector codes and rules, ASIC and ACCC expectations, and relevant consumer, financial services and complaints obligations.
Produce concise risk assessments, control reviews and recommendations that clearly explain the issue, customer impact, likelihood, consequence, existing controls and residual risk.
Useful, but not essential
Knowledge of identity fraud, account takeover, social engineering, mule activity, payment fraud or digital platform abuse.
You will have the opportunity to shape fraud and scams capability across a diverse portfolio of digital ventures, rather than working within a single product or control environment.
You will work with teams at different stages of growth, tackle a wide range of customer and technology risks, and have genuine influence over how new products are designed and scaled.
You will also be part of a collaborative Security team where people are expected to share their expertise, learn beyond their core discipline and get involved in solving the problems that matter.
