Technology Risk and Assurance Lead

• Melbourne or Perth, 4 days in the office, complex environment
• Autonomy to drive and own your remit in a growing business
• Leading Australian enterprise, experienced and supportive management

Join a major Australian enterprise at a point where security assurance is becoming more rigorous, practical and evidence-led. This is a hands-on role for someone who enjoys getting underneath controls, testing whether they work in the real world and turning findings into clear, useful recommendations.

You'll operate across a large, complex technology environment, partnering with highly experienced and approachable security leaders who value constructive challenge. With broad stakeholder exposure and genuine scope to shape assurance practices, this is an opportunity to leave a visible mark.

About the role

• Independently assess security and technology controls for design and operating effectiveness.
• Perform assurance activities including evidence reviews, walkthroughs, sampling and technical control validation.
• Work across technology, security, people and process controls in a complex enterprise environment.
• Translate testing outcomes into clear findings, residual risk assessments and practical recommendations.
• Partner with control and risk owners, constructively challenging assumptions and strengthening controls.
• Help evolve assurance reporting, testing approaches and security validation capability.

About you

• Hands-on experience testing or assuring technology or security controls.
• Background in controls assurance, technology audit, internal audit, security assessments or control validation.
• Strong understanding of control design, operating effectiveness and residual risk.
• Familiarity with frameworks such as ISO 27001, NIST CSF or Essential Eight.
• Confident analysing evidence and communicating practical recommendations to senior stakeholders.
• Curious, pragmatic and comfortable constructively challenging stakeholders.

If you're looking for a role where you can move beyond documenting risk and genuinely test whether security controls stand up in practice, apply now to learn more.