IT Auditor - Manager
Summary
A hands-on Technology Internal Audit Manager leads end-to-end internal audits across cyber security, IT infrastructure, data, and major change initiatives at a highly regulated Brisbane organisation, reporting on control effectiveness and driving remediation. Requires an IT/CS degree, certifications like CISA/CISSP, and team leadership experience.
Salary: $170k - $175k p.a. + super
Leading, highly regulated organisation is looking for an experienced Technology Internal Audit Manager to lead and deliver technology-focused internal audits across cyber security, IT infrastructure, data, and major change/transformation initiatives.
This is a hands-on leadership role where you'll partner with senior technology and risk stakeholders, provide clear assurance on control effectiveness, and drive practical recommendations that uplift security and resilience.
- Lead end-to-end technology internal audits (planning, fieldwork, reporting, and follow-up)
- Develop audit scopes, testing strategies, and high-quality working papers aligned to internal audit methodology
- Assess the design and operating effectiveness of controls across technology, cyber security, and data domains
- Produce clear, insightful audit reports outlining findings, root cause, risk impact, and pragmatic recommendations
- Manage multiple audits concurrently (including co-sourced delivery partners) without compromising quality
- Build strong relationships with technology leaders, executives, and other assurance providers
- Track and validate remediation actions, ensuring control uplift is real and sustainable
- Coach and develop team members, building capability in technology audit and risk-based assurance
About You
You'll bring strong technology assurance capability plus the maturity to engage confidently with senior stakeholders.
- Bachelor's degree in IT, Computer Science (or similar)
- Relevant certifications (one or more): CISA, CISSP, CIA, CA, CPA
- Demonstrated experience auditing:
- Cyber security controls
- Technology / infrastructure environments
- Data & information controls
- Transformation programs / major change
- Strong analytical skills and an ability to translate technical risks into clear business impact
- Proven experience leading, mentoring, and uplifting capability in a team
Desirable
- Experience in a regulated environment (e.g., financial services, insurance, banking, government, critical infrastructure)
- Working knowledge of risk and compliance expectations (e.g., governance frameworks and regulatory standards)