Group Audit & Assurance provides independent assurance over CommBank's risk management, controls and governance. As technology continues to transform banking, we help the Group navigate complex technology and cyber risks while delivering insights that strengthen resilience and customer trust.

See yourself in our team

The Technology & Cyber Audit team provides assurance across the technology platforms, systems and controls that support the bank. Working as a trusted advisor, you'll evaluate emerging risks and provide insights that help shape better outcomes across the Group.

Your impact

As an Audit Manager, you'll independently lead technology audits across complex environments, assessing technology and cyber risks, evaluating control effectiveness and delivering meaningful insights to senior stakeholders.

You'll:

• Lead Technology and Cyber Security audits and assurance reviews, from risk assessment and planning through to execution, reporting and issue validation.
• Assess the effectiveness of governance, risk management and controls across complex technology platforms, infrastructure and cyber security environments.
• Apply strong technical judgement to identify material and emerging risks across areas such as networks, operating systems, databases, cloud infrastructure, endpoint security, identity and access, vulnerability management, security monitoring and technology resilience.
• Engage and constructively challenge senior Technology and Cyber Security stakeholders, translating complex technical matters into clear risk insights and practical audit outcomes.
• Deliver clear, concise and impactful audit findings, identifying underlying risk and root cause and working with stakeholders to support sustainable remediation.

We're interested in hearing from people who have

• Demonstrated experience in technology and cyber assurance, including audit, risk management, control assessment, or related disciplines.
• Deep technical knowledge across Technology Platforms and/or Cyber Security. This may include networks, operating systems, databases, cloud infrastructure, endpoint technologies, security architecture, identity and privileged access, vulnerability management and technology resilience.
• Demonstrated ability to assess complex technology environments, identify material and systemic risks, and evaluate the design and effectiveness of associated controls.
• Experience leading complex audits or assurance reviews and managing engagements from planning through to reporting and remediation.
• Strong stakeholder management and influencing skills, with the confidence to constructively