Manager, Technology and Cyber Audit

About the role

Group Audit & Assurance provides independent assurance over the bank's risk management, controls and governance. The Technology & Cyber Audit team evaluates emerging risks across technology platforms, systems and controls, acting as a trusted advisor to senior Technology and Cyber Security stakeholders. As Audit Manager, you will independently lead technology audits across complex environments, assessing technology and cyber risks, evaluating control effectiveness and delivering insights to senior leadership.

Key responsibilities

• Lead Technology and Cyber Security audits and assurance reviews, from risk assessment and planning through to execution, reporting and issue validation.
• Assess the effectiveness of governance, risk management and controls across complex technology platforms, infrastructure and cyber security environments.
• Identify material and emerging risks in areas such as networks, operating systems, databases, cloud infrastructure, endpoint security, identity and access, vulnerability management, security monitoring and technology resilience.
• Challenge senior Technology and Cyber Security stakeholders and turn complex technical matters into clear risk insights and practical audit outcomes.
• Deliver clear audit findings with underlying risk and root cause, working with stakeholders on sustainable remediation.

Required profile

• Demonstrated experience in technology and cyber assurance, including audit, risk management, control assessment or related disciplines.
• Experience leading complex audits or assurance reviews and managing engagements from planning through to reporting and remediation.
• Strong stakeholder management and influencing skills, able to challenge senior leaders and communicate technical matters clearly.
• Strong analytical and critical-thinking capability, with an understanding of contemporary technology, cyber threats and evolving industry practices.
• Relevant tertiary and/or professional qualifications such as CISA, CISSP, CISM, CRISC or CCSP are highly regarded.