Group Audit & Assurance provides independent assurance over CommBank's risk management, controls and governance. As technology continues to transform banking, we help the Group navigate complex technology and cyber risks while delivering insights that strengthen resilience and customer trust.

See yourself in our team

The Technology & Cyber Audit team provides assurance across the technology platforms, systems and controls that support the bank. Working as a trusted advisor, you'll evaluate emerging risks and provide insights that help shape better outcomes across the Group.

Your impact

As an Audit Manager, you'll independently lead technology audits across complex environments, assessing technology and cyber risks, evaluating control effectiveness and delivering meaningful insights to senior stakeholders.

You'll:

• Lead Technology and Cyber Security audits and assurance reviews, from risk assessment and planning through to execution, reporting and issue validation.
• Assess the effectiveness of governance, risk management and controls across complex technology platforms, infrastructure and cyber security environments.
• Apply strong technical judgement to identify material and emerging risks across areas such as networks, operating systems, databases, cloud infrastructure, endpoint security, identity and access, vulnerability management, security monitoring and technology resilience.
• Engage and constructively challenge senior Technology and Cyber Security stakeholders, translating complex technical matters into clear risk insights and practical audit outcomes.
• Deliver clear, concise and impactful audit findings, identifying underlying risk and root cause and working with stakeholders to support sustainable remediation.

We're interested in hearing from people who have

• Demonstrated experience in technology and cyber assurance, including audit, risk management, control assessment, or related disciplines.
• Deep technical knowledge across Technology Platforms and/or Cyber Security. This may include networks, operating systems, databases, cloud infrastructure, endpoint technologies, security architecture, identity and privileged access, vulnerability management and technology resilience.
• Demonstrated ability to assess complex technology environments, identify material and systemic risks, and evaluate the design and effectiveness of associated controls.
• Experience leading complex audits or assurance reviews and managing engagements from planning through to reporting and remediation.

Strong stakeholder management and influencing skills, with the confidence to constructivelyRole: ICT Security Risk & Compliance Lead 

Location: Murarrie, QLD 

Employment Type: Permanent Full-Time 

Lead risk, compliance and governance initiatives that help protect one of Australia's largest early learning organisations. 

At Goodstart, we're looking for an experienced risk and compliance professional who can drive ICT governance, security risk management and compliance activities across a complex national environment. This role is ideal for someone who enjoys partnering with stakeholders, strengthening risk frameworks, supporting audits, developing policies and translating technical risk concepts into practical business outcomes. 

Working closely with the ICT Manager - Security & Risk, you'll play a key role in ensuring ICT risks are identified, managed and reported in line with organisational risk appetite and regulatory requirements. 

Your Impact: 

As the ICT Security Risk & Compliance Lead, you will play a key role in strengthening Goodstart’s ICT risk, governance and compliance capability. You will lead the development and continuous improvement of risk management frameworks, policies and controls, ensuring ICT risks are effectively identified, managed and reported. By partnering with stakeholders across the business, you'll drive audit and compliance activities, champion cyber risk awareness, and help protect Goodstart’s systems, data and information assets while supporting informed business decision-making. 

What Goodstart can offer you: 

• Flexible work arrangements giving you choice about when and how work will be done in order to better manage your work and non-work needs 
• Salary packaging benefits available through AccessPay (eligibility applies) 
• Access to discounted childcare (up to 15%) 
•  Fitness Passport - access to gyms and pools for you and your family at a heavily discounted price 
• Discounted health care and access to employee wellbeing program with BUPA 
• Exclusive discounts on travel, gym memberships, Apple and Dell products, and more. 
• Free annual flu shot (optional) 
• Option to purchase extra leave for even greater work life balance 
• First Nations Support and Cultural Leave 
• Work for a company that has an aspiration to be globally recognised for early years practice and learning outcomes 
• Gain significant investment in your growth and development with support, tools, training and experiences that will truly enhance the progress and outcomes for children in their earliest years. 

You’ll bring to the table: 

• Proven experience in ICT risk, governance, compliance or information security within a complex organisation. 
• 
  
•