This Line 2 role is focused on hands-on controls testing and practical assurance — not long audit-style reviews. You’ll work closely with technology and business teams to understand what’s really happening on the ground, assess how risks are managed through change, challenge whether controls are effective, and provide clear, evidence-based assurance that supports better decision-making.
What will your key responsibilities include?
Building trusted relationships with technology and business stakeholders, influencing conversations through insight, evidence and constructive challenge
In this role, you’ll help design and deliver a fit-for-purpose assurance approach across technology, cyber and data risk, with a strong focus on risk in change. Your work will include:
Designing and executing a technology, cyber and data assurance plan, aligned to business priorities and FY27 objectives
Performing controls testing to assess whether controls exist, are well designed, and operate effectively in practice
Assessing how risks are identified, managed and controlled through technology delivery and change initiatives
Challenging and clarifying controls, including where they are informal, undocumented or ad hoc
Assessing whether controls are appropriate, centralised, and aligned to risk appetite
Conducting focused assurance reviews on key risks arising from technology, data, or business change — delivering timely insights— not large, slow reviews
Identifying control gaps and emerging risks and providing clear, practical recommendations
Tracking remediation actions and performing follow-up assurance where required
Producing clear, concise assurance reporting supported by evidence
What are we looking for?
Experience in operational risk, audit or compliance advisory, or
A technology, data or cyber background with a strong interest in risk and assurance
Exposure to technology delivery, transformation or change environments
Experience or working knowledge of cyber, technology or data risks
Strong critical thinking and problem-solving skills, using data and evidence to assess risk
Strong written and verbal communication skills, with the ability to engage, influence and build credibility with stakeholders
Experience or interest in assessing risk in change, particularly as it relates to technology delivery
Demonstrated curiosity and initiative, with the ability to work independently and thrive in a dynamic environment
Previous experience in operational risk, audit, compliance advisory, or second-line assurance (desirable)
About us
As one of Australia’s largest customer-owned banks, we’re a driving force in customer owned banking, operating under the trusted brands Greater Bank and Newcastle Permanent. With over 200 years of combined experience, we’ve helped hundreds of thousands of Australians achieve home ownership and providing a genuine alternative to the big banks—all while strengthening the communities we serve. At the heart of everything we do are our core values:
Lead with heart – We genuinely care about achieving better outcomes for our customers and communities.
Own the action – We build trust by doing things the right way, with honesty and transparency.
Embrace opportunity – We look ahead, focusing on our strengths and expertise to challenge the status quo.
Thrive together – By working as one, we create the best possible future for our customers and communities
And we’re just getting started. Join a team shaping the future of trusted banking and make a real impact where it matters most.
A note to recruitment agencies: We’ve got this role covered, so no need to get in touch! As such, we are unable to accept unsolicited CVs and will not be liable for any associated fees. Thank you for your understanding!
NGM Group is committed to delivering trusted banking to enable our customers and communities to thrive. We do this by leading with heart, doing the right things in the right way, and by maintaining high standards of ethical behaviour in everything that we do. All applicants are therefore required to undergo a skills assessment, comprehensive background check, Bankruptcy Check and a National Police Check.
We are also working to reflect the vibrant communities we serve. We believe in creating an inclusive, diverse, and supportive workplace where everyone can thrive. If you require adjustments to be made during the recruitment process or would like to discuss any accessibility requirements, your Talent Acquisition Partner will be happy to engage in a confidential discussion and assist. Your unique talents and perspectives are what make us stronger.