Your Team:

The Cyber Security team protects the bank and our customers from theft, losses and risk events through effective and proactive management of cyber security, privacy and operational risk.

The Cyber Security International team is accountable for identifying cyber strategies, providing consultancy, advisory services for all of CBA’s APAC operations and delivering controls to minimise the cyber-attack surface for internationally hosted infrastructure and capability.

Your Role:

As Senior Manager you will work closely with Executive Manager – Group Cyber Governance & Compliance and the broader Group Cyber Security team to deliver Cyber services across CBA’s (Group) APAC businesses. You will embed the Cyber Security function across these entities, ensuring systems, environments, and services remain within the organisation’s risk appetite, meet regulatory requirements, and implement best practice controls and capabilities.

Key Responsibilities:

• Assist the Executive Manager – Group Cyber Governance & Compliance with risk management, governance, and compliance activities.
• Act as a trusted advisor with local management, advise stakeholders on Group Information Security Policies and Procedures, local regulatory requirements.
• Continuously stay updated of local regulatory developments relevant to cyber security.
• Maintain ongoing compliance with applicable laws and standards across CBA’s APAC businesses
• Proactively identify and implement improvement plans where gaps or changes are identified working closely with local teams and Group’s wider teams.
• Lead delivering consultative services for offshore cyber security requirements, metrics reporting, and risk management.
• Maintain an International Cyber Security Risk Scorecard to monitor Key Risk Indicators and International Cyber Security measures of effectiveness to manage International Cyber Security risk management continuous improvement and support the risk-based approach to prioritisation of improving Cyber Security Controls
• Provide advice and support for stakeholders to rate associated risks and support prioritisation or remediation activities when required.
• This role may require international travel.

Your Experience and Qualifications:

You will be a risk professional who has a passion for technology and cyber security with 5+ years’ experience within Cyber Governance, Regulatory Compliance, Technology Risk, or an applied cyber security role.

Ideally your experience will include time in a consulting or advisory capacity and be able to demonstrate the following:

• Executive consultative & presentation style (English)
• A focus for customer satisfaction and a desire to work in a consultative role
• Strong inductive reasoning ability and negotiation / influencing skills
• Possess strong interpersonal and communication skills and display initiative to lead discussions with operational staff at all levels, business leaders and colleagues
• Experience in a consulting role (strategy, process re-design) and/or an audit role from a professional services firm or international standard FS organisation
• Ability to analyse trends, identify critical threats and opportunities, diagnose problems and issues and recommend appropriate actions
• IT Audit experience would be beneficial
• Risk Reporting experience using risk register tools (such as COGNOS and/or Tableau) would be beneficial

Advertising End Date: 10/10/2025