Technology Risk and Assurance Lead

Emmbr; Melbourne; Hybrid; AUD 120,000 - 150,000; Full time

Job summary

Emmbr is seeking a hands-on Security Assurance professional to independently assess controls across a large, complex technology environment. You will design tests, validate operating effectiveness, and translate findings into practical controls improvements.

You’ll work with security leaders and risk owners in a major Australian enterprise, shaping assurance practices and reporting while maintaining pragmatic, evidence-led recommendations.

Qualifications

• Hands-on experience testing or assuring technology or security controls.
• Background in controls assurance, technology audit, internal audit, security assessments or control validation.
• Strong understanding of control design, operating effectiveness and residual risk.
• Familiarity with frameworks such as ISO 27001, NIST CSF or Essential Eight.
• Confident analysing evidence and communicating practical recommendations to senior stakeholders.
• Curious, pragmatic and comfortable constructively challenging stakeholders.

Responsibilities

• Independently assess security and technology controls for design and operating effectiveness.
• Perform assurance activities including evidence reviews, walkthroughs, sampling and technical control validation.
• Work across technology, security, people and process controls in a complex enterprise environment.
• Translate testing outcomes into clear findings, residual risk assessments and practical recommendations.
• Partner with control and risk owners, constructively challenging assumptions and strengthening controls.
• Help evolve assurance reporting, testing approaches and security validation capability.

Skills

Hands-on testing

Controls assurance

Security assessments

Technology audit

Internal audit

Stakeholder communication

ISO 27001

NIST CSF

Essential Eight

Job description

• Melbourne or Perth, 4 days in the office, complex environment
• Autonomy to drive and own your remit in a growing business
• Leading Australian enterprise, experienced and supportive management

Join a major Australian enterprise at a point where security assurance is becoming more rigorous, practical and evidence-led. This is a hands‑on role for someone who enjoys getting underneath controls, testing whether they work in the real world and turning findings into clear, useful recommendations.

You’ll operate across a large, complex technology environment, partnering with highly experienced and approachable security leaders who value constructive challenge. With broad stakeholder exposure and genuine scope to shape assurance practices, this is an opportunity to leave a visible mark.

About the Role

• Independently assess security and technology controls for design and operating effectiveness.
• Perform assurance activities including evidence reviews, walkthroughs, sampling and technical control validation.
• Work across technology, security, people and process controls in a complex enterprise environment.
• Translate testing outcomes into clear findings, residual risk assessments and practical recommendations.
• Partner with control and risk owners, constructively challenging assumptions and strengthening controls.
• Help evolve assurance reporting, testing approaches and security validation capability.

About You

• Hands‑on experience testing or assuring technology or security controls.
• Background in controls assurance, technology audit, internal audit, security assessments or control validation.
• Strong understanding of control design, operating effectiveness and residual risk.
• Familiarity with frameworks such as ISO 27001, NIST CSF or Essential Eight.
• Confident analysing evidence and communicating practical recommendations to senior stakeholders.
• Curious, pragmatic and comfortable constructively challenging stakeholders.