Head of Audit Security & AI Assurance

National Australia Bank Ltd.; Melbourne; On-site; AUD 250,000 - 350,000; Full time

Job summary

National Australia Bank Ltd. in Melbourne, Australia, seeks a Head of Audit Security to lead the strategy and delivery of the security portfolio including cybersecurity, AI security, identity and data protection.

This role will drive high-quality security audits and provide independent assurance across platforms, cloud, data protection, and resilience. You will partner with the three lines of defence and business audit portfolios, shaping risk-based assurance priorities and translating complex

Qualifications

• Broad technical understanding across IAM, cloud and platform security, data protection, vulnerability management, detection and response.
• Sound AI security foundations for LLM and agentic AI threat models.
• Ability to apply NIST AI RMF, MITRE ATLAS and OWASP guidance for AI security.
• Experience in banking/regulatory environments with leadership of multidisciplinary teams.
• Strong knowledge of APRA CPS 234/230, NIST CSF, ISO 27001.
• CISSP or equivalent; additional credentials desirable (CISM, CISA, CCSP).

Responsibilities

• Lead or sponsor complex security and AI security audits.
• Partner with three lines of defence and technology audit portfolios.
• Translate threats into assurance priorities and business outcomes.
• Develop a high-performing, inclusive security audit team.
• Engage regulators and external assurance providers.

Skills

IAM security

Cloud security

Data protection

Vulnerability management

Detection & response

Secure engineering

AI security

Leadership

Regulatory compliance

APRA CPS 234

NIST CSF

MITRE ATLAS

ISO 27001

CISSP

Job description

National Australia Bank Ltd. in Melbourne, Australia, seeks a Head of Audit Security to lead the strategy and delivery of the security portfolio including cybersecurity, AI security, identity and data protection.

This role will drive high-quality security audits and provide independent assurance across platforms, cloud, data protection, and resilience. You will partner with the three lines of defence and business audit portfolios, shaping risk-based assurance priorities and translating complex