Internal Audit Manager

Audit Manager, Technology Audit

• Shape the future of technology assurance
• Partner with senior stakeholders across Technology & Cyber
• Work at the forefront of cloud, cyber and emerging technology risk
   

Do work that matters

Group Audit & Assurance provides independent assurance over CommBank's risk management, controls and governance. As technology continues to transform banking, we help the Group navigate complex technology and cyber risks while delivering insights that strengthen resilience and customer trust.
 

See yourself in our team

The Technology & Cyber Audit team provides assurance across the technology platforms, systems and controls that support the bank. Working as a trusted advisor, you'll evaluate emerging risks and provide insights that help shape better outcomes across the Group.
 

Your impact

As an Audit Manager, you'll independently lead technology audits across complex environments, assessing technology and cyber risks, evaluating control effectiveness and delivering meaningful insights to senior stakeholders.

You'll:

• Lead Technology and Cyber Security audits and assurance reviews, from risk assessment and planning through to execution, reporting and issue validation.
• Assess the effectiveness of governance, risk management and controls across complex technology platforms, infrastructure and cyber security environments.
• Apply strong technical judgement to identify material and emerging risks across areas such as networks, operating systems, databases, cloud infrastructure, endpoint security, identity and access, vulnerability management, security monitoring and technology resilience.
• Engage and constructively challenge senior Technology and Cyber Security stakeholders, translating complex technical matters into clear risk insights and practical audit outcomes.
• Deliver clear, concise and impactful audit findings, identifying underlying risk and root cause and working with stakeholders to support sustainable remediation.

We're interested in hearing from people who have

• Demonstrated experience in technology and cyber assurance, including audit, risk management, control assessment, or related disciplines.
• Deep technical knowledge across Technology Platforms and/or Cyber Security. This may include networks, operating systems, databases, cloud infrastructure, endpoint technologies, security architecture, identity and privileged access, vulnerability management and technology resilience.
• Demonstrated ability to assess complex technology environments, identify material and systemic risks, and evaluate the design and effectiveness of associated controls.
• Experience leading complex audits or assurance reviews and managing engagements from planning through to reporting and remediation.
• Strong stakeholder management and influencing skills, with the confidence to constructively challenge senior Technology and Cyber Security leaders and communicate complex technical matters clearly.
• Strong analytical and critical-thinking capability, with an understanding of contemporary technology, cyber threats and evolving industry practices.
• Relevant tertiary and/or professional qualifications such as CISA, CISSP, CISM, CRISC, CCSP or equivalent would be highly regarded.
   

If you're passionate about technology risk, assurance and helping shape the future of banking technology, we'd love to hear from you.
 

Working at CommBank

At CommBank, we support flexibility so you can balance how and where work is done, with at least half of each month connecting in the office. We also offer flexible options including adjusted start and finish times, part-time arrangements and job share opportunities.