Audit Manager – Technology & Information Security

About the role

The Audit Manager – Technology and Information Security leads and executes technology and information security audits across ANZ, focusing on high‑risk, enterprise‑wide and strategically significant domains. Reporting to the Audit Director, the role provides independent assurance on governance, cyber resilience, cloud, infrastructure and data management.

Key responsibilities

• Contribute to Technology & Information Security audit engagements, delivering specialist assurance.
• Deliver assigned audit activities within agreed timelines and scope, managing workload and escalating risks.
• Support risk identification and audit scoping, applying knowledge of technology, cyber security and information security.
• Apply internal audit methodology and global standards, ensuring evidence‑based documentation.
• Use data analytics, automation and audit tools to strengthen testing.
• Engage with business, technology and risk stakeholders, raising issues promptly.
• Produce clear, value‑adding audit observations linked to governance and risk management.

Required profile

• Strong understanding of audit methodology, evidence standards and reporting applied to technology and information security.
• Working knowledge of technology risk, cyber security, information security, governance and operational resilience.
• Experience contributing to technology or cyber security assurance activities, assessing governance arrangements and control effectiveness.
• Familiarity with ANZ’s technology risk frameworks, policies and standards.
• Ability to use data analytics, automation and audit tools to support testing and conclusions.
• Professional communication skills and ability to work with stakeholders in a speak‑up culture.