Senior Audit Manager, Cloud Engineering

at  COMMONWEALTH BANK OF AUSTRALIA

YOUR SKILLS & EXPERIENCE

• Extensive understanding and experience in cloud and engineering practices, including secure code management, build, test, and deployment practices in cloud environments.
• Strong knowledge of IT areas such as containers, network security, CI/CD, engineering, AWS IAM, and Kubernetes.
• Experience in auditing cloud-based environments is highly desirable.
• Experience with AI is also highly desirable.
• Excellent leadership and interpersonal skills, with the ability to collaborate and influence work cross-functionally, navigating ambiguity while managing multiple audit engagements or priorities simultaneously in a fast-paced, environment, accepting accountability of the process and delivering on commitments.
• Strong communication (written and verbal) and senior stakeholder engagement with the ability to present and influence senior management.
• Capacity to work to a timetable and ability to meet objectives and targets.

YOUR QUALIFICATIONS

• Tertiary qualification in Computer Science, Information Technology product related fields.
• Typically requires 7+ years auditing or relevant experience.
• Professional certifications such as AWS Certified Solutions Architect, Azure Solutions Architect, or Google Cloud Certified Professional preferred.
• Experience in cloud engineering, DevOps practices, or infrastructure security.’
• Familiarity with audit methodologies, risk management frameworks, and regulatory requirements (e.g., GDPR, PCI DSS, SOC 2) - Desirable
• Strong analytical skills, attention to detail, and problem-solving abilities.

• Develop comprehensive audit plans for cloud infrastructure, DevOps processes, and engineering practices.
• Conduct thorough assessments of cloud environments, configurations, and deployment pipelines.
• Evaluate security controls, access management, data protection, and compliance frameworks.
• Identify potential risks and vulnerabilities in cloud architecture and services.
• Analyze DevOps workflows and automation tools for potential security gaps.
• Provide guidance and recommendations for maintaining compliance in cloud environments.
• Evaluate infrastructure-as-code (IaC) solutions, CI/CD pipelines, and containerization technologies.
• Document audit findings, recommendations, and risk assessment reports in a clear and concise manner.
• Foster a culture of continuous improvement by sharing knowledge and best practices. In line with CBA Internal Audit Methodology, oversee effective and efficient planning and delivery of audits and assist your Executive Manager in building a dynamic, risk-based Audit Plan to appropriately capture key and emerging risks.
• Effectively support, supervise, and deliver assigned scope areas of the audit from Planning, Fieldwork, Reporting, and through to audit closure including administration of key audit stage-gates in the audit electronic workflow system.
• Solve problems by applying innovative thinking and actively participate in processes to capture and act on innovation ideas, to improve the way we work.
• Draft issues and agree the factual accuracy and ratings with stakeholders, as well support the Executive Manager in preparing simple, pragmatic, and easy to read audit reports and issue logs.
• Create and develop independent and objective relationships within GA&A, the Bank and externally to enable effective knowledge sharing and collaboration.