- Manage cyber security risk across a complex supplier ecosystem
- Influence how the Group secures third-party engagements
- Join a leading cyber team protecting customers and the community
You will play a key role in managing cyber security risk across our third-party landscape. Working within our Cyber Security function, you will assess, advise and influence how we manage supplier risk to protect our systems, customers and communities.
This role sits within the Third-Party Security team, where you’ll partner with stakeholders across the Group and externally to ensure strong governance, effective risk management and secure supplier engagement.
Cyber Security is responsible for safeguarding the bank, protecting our customers and ensuring we stay resilient in an evolving threat landscape.
Our Third-Party Security team focuses on cyber risk associated with suppliers, ensuring risks are understood, assessed and appropriately managed. You’ll join a collaborative team environment where you’ll work alongside experienced security professionals to deliver governance outcomes across a complex and evolving supplier ecosystem.
In this role, you will:
- Deliver third-party cyber security risk assessments across suppliers and engagements
- Provide expert input into supplier onboarding, contract reviews and security negotiations
- Identify and assess security non-compliances against internal frameworks and industry standards
- Partner with stakeholders to ensure effective remediation of identified risks
- Monitor regulatory and policy changes and provide insights on their impact
- Represent Cyber Security in governance forums with internal and external stakeholders
- Contribute to the uplift of third-party security governance frameworks
- Build trusted relationships across a diverse stakeholder network, both onshore and offshore.
You bring a strong foundation in cyber security risk and governance, with the ability to navigate complexity and influence outcomes across a large organisation.
- Experience in cyber security risk, governance, or third-party/supplier risk management
- Strong understanding of frameworks such as APRA CPS 234, NIST CSF or ISO 27001
- Ability to assess and translate complex cyber risks into pragmatic business outcomes
- Experience working with suppliers or in enterprise risk environments (highly regarded)
- Background in financial services or consulting environments (advantageous)
- Knowledge of application, infrastructure or telecommunications security concepts
- Strong stakeholder management across technical and non-technical audiences
- A curious, improvement-focused mindset
We support our people with flexibility to balance where work is done, with at least half your time each month connecting in-office. We also offer a range of flexible working options including adjusted hours, part-time arrangements and job share opportunities.
At CommBank, we're committed to creating an accessible, inclusive and respectful workplace. If you require support or adjustments, please let us know. We welcome applications from people of all backgrounds and we're particularly committed to making a positive difference for Aboriginal and/or Torres Strait Islander Peoples. For support please contact 1800 989 696
If you're already part of the Commonwealth Bank Group (including Bankwest, x15ventures), you'll need to apply through Sidekick to submit a valid application. We’re keen to support you with the next step in your career.
We're aware of some accessibility issues on this site, particularly for screen reader users. We want to make finding your dream job as easy as possible, so if you require additional support please contact HR Direct on 1800 989 696.
Advertising End Date: 27/07/2026
