Chris Cullen Email & Phone Number

Melbourne, Victoria, Australia

Responsible for supporting the delivery of the process, risk and controls program and ensure material risks are identified, assessed, and rated in our People practices.Key responsibilities include:- Work collaboratively and proactively with Risk, Compliance and other SME’s (as Line 1) to identify, document and assess key risks and controls- Ensure that key risk events are investigated to determine root cause, that appropriate treatment actions are taken, that incidents are reported and updates are made to the risk profiles- Maintain bow ties, risk registers and databases to ensure that they are up to date and embedded within the team- Prepare information to support the strategic plan, track and report on the Risk Appetite Statement- Support and monitor required risk treatments to ensure risk exposures are within acceptable risk tolerances - Support the engagement with risk and control owners on the status of agreed treatment activities- Analyse existing and proposed controls and processes and prepare recommendations where revisions, additional efficiencies are required- Develop risk training material- Administer governance forums, including preparation and action management- Document existing business processes, risks and controls using agreed frameworks and evaluate the current business processes against good practice and identify gaps- Contribute to driving efficiencies by supporting opportunities for automation and development of appropriate systems and tools- Support the creation of reports to meet business needs - Execute a range of compliance and business process reviews under the direction of Senior Risk & Compliance Manager- Promote a proactive risk management culture- Actively co-ordinate with the IRM technical team and stakeholders to implement team requirements- Maintaining data quality in a GRC System and monthly management reporting

Melbourne, Victoria, Australia

Assist and lead with the ongoing management and development of LUCRF Super’s risk management and governance framework and policies and understanding and managing organisational risks.Responsibilities:- Develop a strong risk culture, frameworks, and processes across the organisation, including support to develop and implement policies, procedures, and tools.- Develop a continuous improvement program, in the way in which the organisation identifies, manages, monitors and reports on risk activities and issues.- Support risk and control assessments by assessing and updating the risk register. - Maintain the Enterprise Risk Register and Risk Management System, ensuring Risk and Controls Owners are provided with up-to-date assessment and monitoring. - Monitor and report on key risk indicators and internal controls to relevant internal stakeholders. - Assist to develop and deliver relevant awareness and training campaigns to ensure that the organisation understands and implements an appropriate level of enterprise risk management activities.- Assist with maintenance of risk and governance frameworks and structures within the Fund in accordance with APRA’s Prudential Standards and performing reviews of these frameworks.- Consult with Executive and Management team to conduct risk assessments. - Prepare reports for the Committee and Board.- Review and ensure the business meets its obligations in relation to AML/CTF Act.- Conduct due diligence and deep analysis on matters that are escalated.- Assist and support the CRO and Company Secretary, Board and Committee on governance matters, including policies, Board and Committee papers, and monitoring activities.- Support CRO and Company Secretary on general governance issues and management on various matters.

Milton, Brisbane

I was responsible for assisting with the ongoing management and development of Sunsuper’s Risk Management Framework and execution of the Risk Management Program of work. I work closely with Business and People leaders to ensure risks are identified and managed and accordingly provide advisory services to the Business on risk related matters.Key Responsibilities -- Uplift and improvement to the Governance Risk & Compliance (GRC) system to help improve the management of Key Risks, Sub Risks and Controls for the enterprise.- Regular review of Enterprise Risk, Sub Risk and Control assessments on the GRC system & work with the business to ensure that the system captures the current state and/or challenge if not comfortable with assessments/ratings.- Where Assessments are below required level, work with assigned staff to put in place an Action Plan/s to address any issues identified and lift the assessment or Risk rating back to a preferred level.- Active involvement with Regular Risk Workshops held with Executive and other staff for the different Business areas within the business to review their Risk Registers.- Execution of risk reviews (detailed review) and risk walk-through (higher level review) in key areas of the business.- Providing advice on risk, control, and governance and compliance management within the business.- Preparation and assistance with reporting to Sunsuper Committees, Management and Board.- Active involvement in the internal and external audit process.- Active involvement in strategic change initiatives and business programs/projects.- Review of Incidents and Breaches and link to associated Controls and/or Risks.- Participant in Legislative Change Committee and Breach & Incident Working Group- Review of Public documents & communication such as PDS, Guides, Annual Statements and various communication campaigns- Maintain, review and report on Risk Culture statistics

Brisbane, Australia

• Management and co-ordination of regular Data Integrity checks to ensure that team KPI are met and ensure that quality of data is as clean as we can get it going into each Review.• Annual Review - within Project Team, I was the Stream Manager for the Industry and Pension Reviews. This meant I was the main conduit between the PM and the business throughout the review process .• Rejects or members with bad data at the review are down over 80% over the past 5 years (remaining items we can not get reports for or timing issue).• With the data quality for the Annual Review improving from year to year, there has been greater focus on the cause of the bad data with some key improvements or suggested improvements made for Online data and Insurance management.

Sydney Nsw

Major Projects managed while in this position included:• Assessment of new printing software (Budget > $1M) - which included use of Artificial Intelligence to learn and identify and process large contribution returns previously processed manually;• Business automation – The use of scanning to replace manual processing and saving of equivalent 4 Full Time Employee positions;• KAZ Group Risk Management Program - Project as KAZ were looking to list on the Australian stock market. Involved interviewing all Executive Managers to come up with the Risk Register and identified existing Controls and assessment of those risks and controls.;• RSE Trustee Licensing;• Choice of Fund & Clearing House facility for AAS’ clients - branded clearing house being rolled out to AAS clients to assist their employers with the payment of superannuation contributions;• Fee Disclosure and other legislative change projects - For the Fee Disclosure Project, in order to create a Statement template, regular meetings were held with the REST Industry Fund Operations Manager and other Fund's senior staff to work through and agree to the future statement template..