Senior Audit Lead - Technology and Information Security

About Us

At ANZ, we're shaping a world where people and communities thrive, driven by a common goal: to improve the financial wellbeing and sustainability of our millions of customers.

About the Role

The Senior Audit Lead - Technology & Information Security is part of the Technology & Information Security Centre of Audit, delivering specialist independent third line assurance over the governance, risk management practices and controls supporting the Group’s technology, cyber security and information security environment.

Reporting to the Audit Director - Technology & Information Security, you will lead complex technology and cyber security audits, providing independent assurance over technology risks, information security, cyber resilience, cloud, data, and technology-enabled business processes.

We are seeking an experienced audit professional with expertise across areas such as Cyber Security, Cloud, Data, Technology Risk, Infrastructure, Digital Transformation, or Operational Resilience. You'll lead complex audits, assess emerging and established risks, and engage senior business and technology stakeholders to drive meaningful assurance outcomes.

Through the Centre of Audit model, you will also provide specialist Technology & Information Security expertise to Internal Audit teams, helping to ensure consistent identification, assessment and reporting of technology and cyber security risks across the organisation.

Working closely with colleagues across Internal Audit and the broader organisation, you'll help strengthen ANZ's control environment, build audit capability, and support continuous improvement across the function.

Role Location: Melbourne, Brisbane or Sydney

Role type: permanent full time

Work Hours: 40 hrs/week

What will your day look like?

As a Senior Audit Lead - Technology & Information Security, you will:

• Lead complex and high-risk Technology & Information Security audit engagements across the Group, delivering specialist assurance through the Technology & Information Security Centre of Audit aligned to the approved Internal Audit Plan.
• Contribute to annual and ongoing audit planning, providing specialist input on emerging technology and cyber security risks, threat trends, regulatory developments and thematic insights to support risk-based audit coverage.
• Assess the design and operating effectiveness of controls across technology, information security, data, cloud, automation, operational resilience, and technology governance environments.
• Apply expert Technology & Information Security risk judgement and strong methodology discipline throughout audit scoping, testing and reporting, leveraging Internal Audit methodology, GAIS and relevant technology, cyber and information security frameworks.
• Manage audit delivery to agreed timelines and budgets while ensuring strong issue follow-up, validation readiness, effective resource utilisation and timely escalation of delivery risks.
• Build trusted relationships with senior Technology and Business stakeholders, providing independent challenge, insightful risk perspectives, and credible assurance.
• Apply a technology-enabled audit mindset by leveraging data analytics, automation and other assurance techniques, while coaching and developing team members and fostering a strong speak-up culture. 

What will you bring?

To grow and be successful in this role, you will ideally bring the following:

• Strong internal audit expertise, including audit methodology, evidence standards, reporting, issue validation and risk-based assurance techniques applied across complex Technology & Information Security environments.
• Extensive experience in technology audit, technology risk, information security, or assurance within large and complex organisations.
• Proven ability to lead concurrent technology audits or risk reviews of medium to high complexity across areas such as cyber security, cloud, infrastructure, data, technology operations, or digital transformation.
• Experience using data analytics, automation and technology-enabled audit techniques to strengthen audit planning, testing, insight generation and assurance conclusions.
• Strong understanding of technology risk management frameworks and principles, including operational risk, compliance risk, cyber risk, and delivery risk.
• Strong stakeholder management, negotiation, influencing, and conflict resolution skills, with the ability to engage effectively with senior Technology and Business leaders.
• Banking, financial services, or other regulated industry experience, along with knowledge of emerging technology risks and cyber security risks will be highly regarded.
• A collaborative and growth-oriented mindset, with a passion for continuous improvement, innovation, and developing capability within teams.

Qualifications

• Tertiary qualification in Information Technology, Computer Science, Cyber Security, Information Systems, Engineering, Data Analytics, or a related discipline along with professional certifications such as CISA, CISSP, CRISC, CISM, CIA, CA, CPA or equivalent will be highly regarded.

You’re not expected to have 100% of these skills. At ANZ a growth mindset is at the heart of our culture, so if you have most of these things in your toolbox, we’d love to hear from you.

So why join us?

From the moment you join ANZ, you'll be doing meaningful work that will shape a world where people and communities thrive.

But it's not just our customers who'll feel your impact. You'll feel it too. Because at ANZ, you'll have the resources, opportunities, and support you need to take the next big step in your career.

We're a diverse bunch at ANZ in different roles, different locations, doing different things. That's why we have a range of flexible working arrangements, so our people can 'make work, work for them'. We also provide a range of benefits including access to health and wellbeing services and discounts on selected products and services from ANZ and more.

At ANZ, you'll be part of an organisation where the different backgrounds, perspectives and life experiences of our people are celebrated. That's because we're committed to building a workplace that reflects the diversity of the communities we serve. We welcome applications from everyone and encourage you to talk to us about any adjustments you may require to our recruitment process or the role itself. If you're a candidate with a disability or access requirement, and have an enquiry about the support provided, please let us know on your application or visit ANZ Accessibility and Inclusion Programs for alternate contact methods.

To find out more about working at ANZ, visit https://www.anz.com.au/careers. You can apply for this role by visiting ANZ Careers and searching for reference number 122948.
 

Job Posting End Date

04/10/2026, 11.59pm, (Melbourne Australia)