Manager, Defensive Assessments & Emerging Tech (Cloud Security)

• Lead cloud security assessments that strengthen cyber resilience across enterprise environments
• Drive control uplift, visibility and assurance across complex public cloud platforms
• People leadership role in a high-impact cyber defence team

Do work that matters

As a Cloud Security Incident Response Manager, you will lead a small team focused on assessing and improving the cyber defence posture of public cloud environments.

You will bring deep cloud security expertise and help shape how environments are configured, monitored and prepared for effective detection and response. A key focus of this role is leading and reviewing cloud security assessments, ensuring teams have the visibility, telemetry and controls required to identify issues and respond with confidence.

This role combines technical depth with people leadership, with a strong emphasis on assessment, assurance and continuous improvement of cloud security controls.

See yourself in our team

Group Security is part of Technology and brings together security and resilience capabilities spanning cyber security, protective security and business resilience, fraud technology and operations, and cyber defence. Its purpose is safeguarding a brighter future for all through governance, protection, detection, response and recovery.

Within this environment, Cyber Defence Operations is responsible for detecting and responding to attacks against the Bank's systems and customers. The function includes detection and response, red team, cybercrime and digital forensics capabilities.

In this role, you will:

• Lead and develop a team of cloud security analysts, driving a collaborative and high-performing culture
• Review and guide cloud security assessments, including configuration, logging and detection readiness
• Help ensure cloud environments are optimised for monitoring, visibility and response readiness
• Act as a senior escalation point for cloud security and assessment-related activities
• Define and uplift best practice approaches for cloud security control hygiene
• Support incident response activities across cloud workloads when required
• Identify control gaps and contribute to defence assessments and post-incident reporting
• Partner with engineering and cloud teams to strengthen the overall security posture of cloud environments

We're interested in hearing from people who:

You are a cloud security leader with strong technical depth and the ability to assess complex environments, guide others and improve control effectiveness at scale. You may come from cloud security engineering, cloud assurance, security consulting or operational security environments, and you bring the judgement to review technical outputs and turn findings into meaningful action.

• Deep expertise in cloud security across large and complex environments
• Experience conducting or reviewing cloud security assessments, control reviews or assurance activities
• Experience writing or reviewing security reports, with the ability to ensure outputs are clear, structured and actionable
• Strong understanding of cloud monitoring, logging and detection capabilities
• Exposure to cloud incident response practices or operational security environments
• Ability to assess technical environments and provide clear, practical recommendations
• Demonstrated people leadership or team management experience
• Strong stakeholder engagement and communication skills

Technical capabilities

• Strong knowledge of cloud security controls and services across public cloud environments
• Experience evaluating security posture, visibility and control effectiveness in cloud platforms
• Exposure to platforms such as Azure, AWS or Google Cloud will be beneficial
• Knowledge across areas such as threat detection, network forensics, host analysis or vulnerability management will be advantageous
• Experience working within enterprise-scale technology environments

Qualifications

• Tertiary qualification in Information Technology, Cybersecurity or a related discipline preferred
• Relevant cloud security or information security certifications such as CISSP or equivalent are desirable

Working with us

At CommBank, we're committed to creating an accessible, inclusive and respectful workplace. If you require support or adjustments, please let us know. We welcome applications from people of all backgrounds and we're particularly committed to making a positive difference for Aboriginal and/or Torres Strait Islander Peoples. For support please contact 1800 989 696

If you're already part of the Commonwealth Bank Group (including Bankwest, x15ventures), you'll need to apply through Sidekick to submit a valid application. We're keen to support you with the next step in your career.

We're aware of some accessibility issues on this site, particularly for screen reader users. We want to make finding your dream job as easy as possible, so if you require additional support please contact HR Direct on 1800 989 696.

Advertising End Date: 22/07/2026