Senior Auditor – Tech & Cyber Audit

• Join a high-impact team delivering assurance across critical technology and cyber domains for Australia’s leading financial institution.
• Work on complex, cutting-edge IT environments, including cloud, APIs, and resilience frameworks.
• Be part of a collaborative, expert audit community that partners with senior leaders to shape risk management strategies.
   

Do Work That Matters:

Help safeguard the Bank’s technology ecosystem by providing independent, risk-focused assurance that strengthens resilience and protects millions of customers.
 

See Yourself in Our Team:

You’ll join the Tech & Cyber Audit team within Group Audit & Assurance (GA&A), a centre of excellence for IT audit assurance. Our team partners with senior management across the Group to deliver insights that improve control environments and drive productivity.
 

Your Impact:

Reporting directly to an Executive Manager in the Tech & Cyber Audit Team, you’ll play a key role in delivering the IT audit plan and providing value-add assurance services to the business. Your responsibilities will include:

• Execute IT audits within agreed timeframes and in line with GA&A methodology.
• Engage with stakeholders through interviews and process walkthroughs to understand risk and control environments.
• Test key controls by gathering audit evidence, interpreting data, and documenting clear conclusions.
• Validate closed issues and ensure remediation actions are effective.
• Develop deep knowledge of the Group’s IT systems, technologies, and processes, sharing insights across the team.
• Apply sound judgement in a wide-reaching role that requires discretion and adaptability.
• Manage timelines and communication effectively while building strong stakeholder relationships.
• Adhere to the Code of Conduct, ensuring high standards of behaviour and decision-making.
   

We’re interested in hearing from people who have:

• Demonstrated experience in auditing IT controls, with strong knowledge across:
  Application controls
  IT security and cyber risk
  Identity and access management
  Systems development and lifecycle management
  Change and release management
  Incident and problem management
  Systems resilience and availability
• Exposure to auditing IT operating systems, databases, cloud-based environments, or API technologies.
• Risk Mindset – All CommBank employees are expected to proactively identify and understand, openly discuss and act on current and future risks.
• Experience with data analytics and interpretation.
   

Your Qualifications:

• Tertiary qualification in Commerce, Business, or Technology-related fields.
• Professional certifications such as CISA, CISSP, CISM, or ITIL.
   

If you have the right skills and experience, we're looking for, please apply now!
 

Working at CommBank 

At CommBank, we support our people with the flexibility to balance where work is done with at least half their time each month connecting in office. We also have many other flexible working options available including changing start and finish times, part-time arrangements and job share to name a few. Talk to us about how these arrangements might work in the role you’re interested in. 

Advertising End Date: 27/11/2025