Manager, Technology And Cyber Audit

Commonwealth Bank Of Australia; Melbourne; On-site; AUD 140,000 - 190,000; Full time

Job summary

Commonwealth Bank of Australia in Melbourne seeks an Audit Manager to independently lead technology and cyber audits across complex environments, evaluating risks and control effectiveness. You’ll partner with senior Technology & Cyber stakeholders to translate technical matters into clear risk insights and actionable remediation plans.

Responsibilities include planning, executing and reporting on audits from risk assessment through issue validation, and delivering concise findings that

Qualifications

• Demonstrated experience in technology and cyber assurance, including audit, risk management or related disciplines.
• Deep technical knowledge across technology platforms, cyber security and resilience.
• Ability to assess complex technology environments, identify material and systemic risks, and evaluate controls.
• Experience leading complex audits or assurance reviews from planning to remediation.
• Strong stakeholder management and ability to challenge senior leaders with clear risk insights.

Responsibilities

• Lead technology and cyber audits from risk assessment to execution, reporting and issue validation.
• Assess governance, risk management and controls across technology platforms, infrastructure and cyber security.
• Apply technical judgement to identify material and emerging risks in networks, cloud, identity and resilience.
• Engage with senior stakeholders to translate complex findings into clear risk insights and remediation plans.
• Deliver concise audit findings and support sustainable remediation.

Skills

Tech assurance

Audit & risk

Stakeholder mgmt

Analytical thinking

Cloud & security

Education

CISA/CISSP/CISM/CRISC/CCSP certification

Job description

Manager, Technology and Cyber Audit

• Shape the future of technology assurance
• Partner with senior stakeholders across Technology & Cyber
• Work at the forefront of cloud, cyber and emerging technology risk

Do work that matters

Group Audit & Assurance provides independent assurance over CommBank's risk management, controls and governance. As technology continues to transform banking, we help the Group navigate complex technology and cyber risks while delivering insights that strengthen resilience and customer trust.

See yourself in our team

The Technology & Cyber Audit team provides assurance across the technology platforms, systems and controls that support the bank. Working as a trusted advisor, you'll evaluate emerging risks and provide insights that help shape better outcomes across the Group.

Your impact

As an Audit Manager, you'll independently lead technology audits across complex environments, assessing technology and cyber risks, evaluating control effectiveness and delivering meaningful insights to senior stakeholders.

In this role, you will:

• Lead Technology and Cyber Security audits and assurance reviews, from risk assessment and planning through to execution, reporting and issue validation.
• Assess the effectiveness of governance, risk management and controls across complex technology platforms, infrastructure and cyber security environments.
• Apply strong technical judgement to identify material and emerging risks across areas such as networks, operating systems, databases, cloud infrastructure, endpoint security, identity and access, vulnerability management, security monitoring and technology resilience.
• Engage and constructively challenge senior Technology and Cyber Security stakeholders, translating complex technical matters into clear risk insights and practical audit outcomes.
• Deliver clear, concise and impactful audit findings, identifying underlying risk and root cause and working with stakeholders to support sustainable remediation.

We're interested in hearing from people who have

• Demonstrated experience in technology and cyber assurance, including audit, risk management, control assessment, or related disciplines.
• Deep technical knowledge across Technology Platforms, Cyber Security and/or Technology Resilience. This may span infrastructure, cloud, security, identity, vulnerability management and resilience technologies.
• Demonstrated ability to assess complex technology environments, identify material and systemic risks, and evaluate the design and effectiveness of associated controls.
• Experience leading complex audits or assurance reviews and managing engagements from planning through to reporting and remediation.
• Strong stakeholder management and influencing skills, with the confidence to constructively challenge senior Technology and Cyber Security leaders and communicate complex technical matters clearly.
• Strong analytical and critical-thinking capability, with an understanding of contemporary technology, cyber threats and evolving industry practices.
• Relevant tertiary and/or professional qualifications such as CISA, CISSP, CISM, CRISC, CCSP or equivalent would be highly regarded.

Working at CommBank

At CommBank, we're committed to creating an accessible, inclusive and respectful workplace. If you require support or adjustments, please let us know. We welcome applications from people of all backgrounds and we're particularly committed to making a positive difference for Aboriginal and/or Torres Strait Islander Peoples. For support please contact 1800 989 696

We're aware of some accessibility issues on this site, particularly for screen reader users. We want to make finding your dream job as easy as possible, so if you require additional support please contact HR Direct on 1800 989 696.