Audit Manager - Technology and Information Security

About Us

At ANZ, we're shaping a world where people and communities thrive, driven by a common goal: to improve the financial wellbeing and sustainability of our millions of customers.

About the Role

Roles within the Technology & Information Security Centre of Audit are responsible for delivering specialist independent third line assurance over the governance, risk management practices and controls supporting the Group's technology, cyber security and information security environment.

Reporting to the Audit Director – Technology & Information Security, these roles lead and execute technology and information security audits across the Group, focusing on higher-risk, enterprise-wide and strategically significant technology domains. The roles also provide specialist risk expertise and advisory support to audit teams through the Centre of Audit model, helping to ensure consistent identification and assessment of technology and information security risks.

The roles provide evidence-based assessments of technology governance, cyber resilience, information security, cloud and infrastructure management, technology operations, data management and technology change. Through the disciplined application of Internal Audit methodology, technical expertise and professional judgement, they contribute to high-quality audit outcomes that support effective risk management and organisational resilience.

Banking is changing and we’re changing with it, giving our people great opportunities to try new things, learn and grow. Whatever your role at ANZ, you’ll be building your future, while helping to build ours.

Role Type: Permanent role 
Role Location: Melbourne VIC
Work Hours: Full time (40 hours per week)

What will your day look like?

As an Audit Manager – Technology and Information Security, your core accountabilities include:

• Contribute as a team member to Technology & Information Security audit engagements, supporting delivery of specialist assurance through the Technology & Information Security Centre of Audit
• Deliver assigned audit activities within agreed timelines and scope, managing own workload effectively and escalating execution risks, dependencies or delays early
• Support risk identification and audit scoping activities, applying understanding of technology, cyber security, information security and technology risk management practices to inform testing
• Apply Internal Audit methodology and Global Internal Audit Standards consistently, ensuring work is evidence-based, well documented and supports clear, defensible conclusions
• Apply relevant risk management frameworks, including the Non-Financial Risk Framework and relevant Technology, Information Security and Cyber Security frameworks, to support sound risk analysis and audit judgements
• Complete issue follow-up, documentation and validation activities accurately and on time, ensuring evidence is clear, complete and review-ready
• Use data analytics, automation and other audit tools where appropriate to strengthen testing and analysis within assigned audit work
• Engage professionally with business, technology and risk stakeholders, supporting Audit Leads in audit delivery and raising issues or concerns promptly
• Contribute to clear, value-adding audit observations grounded in evidence and linked to the effectiveness of technology and information security governance, risk management practices and controls
• Contribute to a positive risk and speak-up culture, demonstrating professionalism, integrity, accountability and openness to feedback

What will you bring?

To grow and be successful in this role, you will ideally bring the following:

• Internal audit fundamentals: Sound understanding of audit methodology, evidence standards, reporting and documentation requirements, applied to Technology & Information Security assurance engagements
• Technology & Information Security knowledge: Working knowledge of technology risk, cyber security, information security, technology governance and operational resilience, sufficient to support effective audit fieldwork, issue identification and escalation
• Technology assurance experience: Demonstrated experience contributing to technology, cyber security or information security assurance activities, including the ability to assess governance arrangements, risk management practices and control effectiveness within assigned audit work
• Technology Risk at ANZ: Awareness of ANZ's Technology and Information Security risk management frameworks, policies and standards sufficient to support audit testing and identify areas of control weakness or potential risk exposure
• Audit delivery capability: Demonstrated experience contributing to audit engagements and producing accurate, evidence-based audit outputs
• Data and technology awareness: Ability to use data analytics, automation and audit tools provided to support testing, analysis and audit conclusions
• Professional engagement: Ability to work professionally with stakeholders and audit team members and escalate concerns in line with a strong speak-up culture

You’re not expected to have 100% of these skills. At ANZ a growth mindset is at the heart of our culture, so if you have most of these things in your toolbox, we’d love to hear from you.

So why join us?

From the moment you join ANZ, you'll be doing meaningful work that will shape a world where people and communities thrive.

But it's not just our customers who'll feel your impact. You'll feel it too. Because at ANZ, you'll have the resources, opportunities, and support you need to take the next big step in your career.

We're a diverse bunch at ANZ in different roles, different locations, doing different things. That's why we have a range of flexible working arrangements, so our people can 'make work, work for them'. We also provide a range of benefits including access to health and wellbeing services and discounts on selected products and services from ANZ and more.

At ANZ, you'll be part of an organisation where the different backgrounds, perspectives and life experiences of our people are celebrated. That's because we're committed to building a workplace that reflects the diversity of the communities we serve. We welcome applications from everyone and encourage you to talk to us about any adjustments you may require to our recruitment process or the role itself. If you're a candidate with a disability or access requirement, and have an enquiry about the support provided, please let us know on your application or visit ANZ Accessibility and Inclusion Programs for alternate contact methods.

To find out more about working at ANZ, visit https://www.anz.com.au/careers. You can apply for this role by visiting ANZ Careers and searching for reference number 122950 .
 

Job Posting End Date

01/10/2026, 11.59pm, (Melbourne Australia)