Senior Audit Manager

• Lead Audits That Shape the Future of Tech
• Influence Strategy with Data & AI
• Make an Impact That Matters

Do work that matters:
 

The Commonwealth Bank of Australia (Bank) is Australia's leading provider of integrated financial services. They are committed to continuously improving governance practices and ensuring that they are aligned with business, stakeholders, and customers’ needs. Group Audit and Assurance (GA&A) are the internal audit function for the Group. Their primary purpose is to provide independent and objective assurance of the effectiveness of the Groups risk management, controls, and governance processes. 

Evolving customer expectations, competitive threats and pace of change require GA&A to support the business with new insights and risk coverage that puts customers first and to continue to provide insightful assurance to the Board. As digital technology disrupts and transforms entire industries and ways of working, GA&A is committed to keeping pace and continually reimagining themselves with the latest global best technology and innovation.

Over the last three years GA&A has increasingly embedded digital assurance into audit activities, injecting Artificial Intelligence (AI) into routine control testing and using digital tools to improve the overall experience for employees. 

By reducing administrative overhead, GA&A have increased their team’s capacity for high value judgement-based activities and expanded their support to include sharing knowledge and tools that create better risk coverage across the Bank for all Three Lines of Assurance. With global-best digital tools that harness the power of data, analytics and AI, GA&A are delivering smarter, faster, and safer outcomes to address current and emerging risks and provide better assurance outcomes for our customers and community. GA&A was recognised as an ABA100 winner for both Risk Management and Business Innovation in The Australian Business Awards 2023.

Your Team:

The Technology & Cyber team audits the technology platforms, processes, and applications. We seek a specialist in auditing technology platforms, you will be an essential part of our mission to ensure that the bank's critical systems — from databases and networks to operating systems, end-user support, and Site Reliability Engineering (SRE) practices — are secure, efficient, and compliant.

Your Impact:

You will work within a diverse and dynamic team, focused on evaluating and enhancing the controls that support the bank's technology infrastructure. As part of the Internal Audit team, you will help identify risks, ensure systems are functioning optimally, and contribute to continuous improvement across the bank’s technology landscape.

The Senior Audit Manager is a pivotal role within the Tech & Cyber audit team, and your role is to lead and conduct comprehensive audits of technology platforms such as databases, networks, operating systems, and SRE practices to assess the effectiveness of controls, operational efficiency, and risk mitigation strategies. Your responsibilities include:
 

• Lead and conduct technical audits over technology platforms such as databases, networks, operating systems, engineering and SRE practices to assess the effectiveness of controls, operational efficiency, and risk mitigation strategies.
• Assess the robustness of network infrastructure, cloud platforms, and data storage to identify vulnerabilities, gaps in controls, and opportunities for improvement.
• Conduct comprehensive audits focused on technology platforms and processes, such as end of support and change management.
• Evaluate and assess the effectiveness of technology controls, policies, and procedures to ensure the bank systems are always available to meet customer needs as well as regulatory and industry standards.
• Providing assurance and recommendations to improve the reliability, resiliency and performance of the IT systems and services.
• Communicating audit findings and recommendations to senior management and stakeholders, both verbally and in writing.
• Following up on the implementation of agreed action plans and monitoring the resolution of audit issues.
• Staying abreast of emerging technologies, trends, and risks, and developing audit methodologies and tools to address them.
• Contributing to the continuous improvement and innovation of the audit function and the IT strategy.
• Collaborating with people across various parts of the Group; stakeholder management and communication skills are essential in this role.
• Provide strategic insights to senior management regarding emerging technology risks and trends and support the bank’s risk management initiatives through continuous monitoring and assessment.
• Operational responsibilities that are required for the smooth functioning of the Technology Audit team, as well as pro-actively contributing to long-term value creation for the Group.
• Lead and mentor junior auditors, promoting a culture of continuous learning and improvement within the team.

We’re interested in hearing from people who have:

• Strong Information Technology Acumen: Demonstrated expertise in navigating complex IT environments within financial services, including experience in internal auditing and knowledge of technology platforms such as databases, networks, operating systems, and cloud-based environments, with a strong understanding of Site Reliability Engineering (SRE) principles.
• Advanced Analytical Skills: Ability to analyse and interpret technical data and trends related to information technology, enabling informed decision-making and strategic planning within audit frameworks.
• Innovative Problem-Solving: Experience in identifying and addressing complex IT audit issues, proposing innovative solutions that enhance efficiency, security, and compliance.
• Collaborative Team Leadership: Proven capability in leading cross-functional audit teams, fostering collaboration, and leveraging diverse expertise to achieve audit objectives effectively.
• Continuous Learning and Adaptability: Commitment to staying updated on technological advancements, industry best practices, and evolving regulatory landscapes, adapting audit strategies accordingly.
• Technical Proficiency and Upskilling: Demonstrated ability to quickly upskill in emerging or unfamiliar technologies.
• Professional certifications such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), or equivalent is highly preferred.

Is this your next challenge? Apply now!

Working at CommBank 

We support our people with the flexibility to balance where work is done with at least half their time each month connecting in office. We also have many other flexible working options available including changing start and finish times, part-time arrangements and job share to name a few. Talk to us about how these arrangements might work in the role you’re interested in. 

Advertising End Date: 11/11/2025