Job Description

Third Party Security Manager – Cyber Security

• Manage cyber security risk across a complex supplier ecosystem
• Influence how the Group secures third-party engagements
• Join a leading cyber team protecting customers and the community

Do work that matters

You will play a key role in managing cyber security risk across our third-party landscape. Working within our Cyber Security function, you will assess, advise and influence how we manage supplier risk to protect our systems, customers and communities.

This role sits within the Third-Party Security team, where you’ll partner with stakeholders across the Group and externally to ensure strong governance, effective risk management and secure supplier engagement.

See yourself in our team

Cyber Security is responsible for safeguarding the bank, protecting our customers and ensuring we stay resilient in an evolving threat landscape.

Our Third-Party Security team focuses on cyber risk associated with suppliers, ensuring risks are understood, assessed and appropriately managed. You’ll join a collaborative team environment where you’ll work alongside experienced security professionals to deliver governance outcomes across a complex and evolving supplier ecosystem.

Your impact and contribution

In this role, you will:

• Deliver third-party cyber security risk assessments across suppliers and engagements
• Provide expert input into supplier onboarding, contract reviews and security negotiations
• Identify and assess security non-compliances against internal frameworks and industry standards
• Partner with stakeholders to ensure effective remediation of identified risks
• Monitor regulatory and policy changes and provide insights on their impact
• Represent Cyber Security in governance forums with internal and external stakeholders
• Contribute to the uplift of third-party security governance frameworks
• Build trusted relationships across a diverse stakeholder network, both onshore and offshore.

We’re interested in hearing from people who:

You bring a strong foundation in cyber security risk and governance, with the ability to navigate complexity and influence outcomes across a large organisation.

• Experience in cyber security risk, governance, or third-party/supplier risk management
• Strong understanding of frameworks such as APRA CPS 234, NIST CSF or ISO 27001
• Ability to assess and translate complex cyber risks into pragmatic business outcomes
• Experience working with suppliers or in enterprise risk environments (highly regarded)
• Background in financial services or consulting environments (advantageous)
• Knowledge of application, infrastructure or telecommunications security concepts
• Strong stakeholder management across technical and non-technical audiences
• A curious, improvement-focused mindset

Why join us

We support our people with flexibility to balance where work is done, with at least half your time each month connecting in-office. We also offer a range of flexible working options including adjusted hours, part-time arrangements and job share opportunities.

Working with us

At CommBank, we're committed to creating an accessible, inclusive and respectful workplace. If you require support or adjustments, please let us know. We welcome applications from people of all backgrounds and we're particularly committed to making a positive difference for Aboriginal and/or Torres Strait Islander Peoples. For support please contact 1800 989 696

Advertising End Date: 27/07/2026