Setting the Scene

Our client is a specialist technology risk, information security and assurance organisation working across a diverse portfolio of clients and complex enterprise environments. The team provides independent advice and assurance across IT risk, information security, governance, controls and technology environments. Their approach goes beyond traditional compliance and box-ticking, focusing on understanding how technology operates, identifying genuine areas of risk and providing practical recommendations that clients can act on.

Due to continued growth, they are looking for an experienced Assistant Manager (IS Risk) to join their Brisbane team. This is a leadership-focused opportunity for someone with a strong background in IT audit, information security, cybersecurity, GRC or technology risk, who is ready to take ownership of multiple engagements and lead a team while remaining hands-on with complex audit and assurance work.

The Role

As Assistant Manager, you will supervise a team across multiple engagements while contributing to medium and high-risk audits. You'll take a lead role in reviewing audit work, applying professional judgement to complex technology and control environments, and ensuring high-quality outcomes for clients. You'll be expected to challenge assumptions, assess technology risks critically and provide recommendations that stand up to scrutiny. You'll also work directly with clients and senior stakeholders, meaning robust communication and the ability to confidently discuss and defend audit findings are essential.

Key responsibilities:

- Supervise and lead teams across multiple IT audit and technology risk engagements
- Take responsibility for the quality, direction and review of audit working papers
- Contribute to medium and high-risk IT audit and information security engagements
- Apply professional judgement to analyse and evaluate technology practices, controls and identified gaps
- Identify technology and information security risks and develop practical recommendations
- Review the work of subject matter experts and ensure consistent quality across engagements
- Support engagement planning, scoping,



resourcing and delivery
- Contribute to business plans, projects and work schedules to ensure successful delivery of engagements
- Manage stakeholder communication throughout client engagements
- Build and maintain productive relationships with clients and internal stakeholders
- Present and communicate audit findings and recommendations to clients
- Handle challenging conversations where clients question or disagree with findings
- Support problem resolution and continuous improvement across the team
- Apply audit and assurance methodologies consistently
- Ensure work aligns with relevant information security standards, technology practices and assurance requirements
- Identify opportunities to use new technologies, techniques and approaches to improve audit outcomes
- Support change management and continuous improvement initiatives
- Contribute to a culture of technical excellence, collaboration and knowledge sharing

What you'll bring

- Strong experience in IT audit, information security, cybersecurity, GRC, technology risk or assurance
- Experience supervising or leading teams across multiple audit, risk or consulting engagements
- Demonstrated experience delivering medium and/or high-risk IT audit or assurance engagements
- Strong understanding of IT risks, controls and information security practices
- Sound knowledge of audit and assurance methodologies
- Excellent professional judgement and ability to assess complex technology issues
- Strong written and verbal communication skills
- Excellent report writing skills and experience producing client-facing audit reports
- Confidence presenting findings and recommendations to clients and senior stakeholders




- Ability to defend recommendations and have constructive conversations when clients challenge findings
- Ability to manage competing priorities across multiple engagements
- Relevant tertiary degree in Information Technology, Cyber Security, Business, Commerce, Accounting or a related discipline
- CISA, CISSP or another relevant professional certification is highly regarded
- CPA Australia or CAANZ membership, or progress towards membership, is advantageous
- Experience reviewing or managing ERP systems, databases, operating systems or network environments is highly regarded
- Experience undertaking internal controls assurance engagements is advantageous
- Australian working rights are required

What’s in it for you?

- Join a specialist technology risk and cybersecurity advisory team, work alongside experienced technology risk and information security professionals
- Lead and supervise multiple client engagements
- Work across complex technology, security and risk environments
- Exposure to medium and high-risk audit and assurance engagements
- Opportunity to develop your leadership, consulting and client management capabilities
- Opportunity to contribute to methodology, innovation and continuous improvement
- Strong exposure to senior stakeholders and complex enterprise environments
- Brisbane CBD location, hybrid working arrangements
- Competitive remuneration package
- Professional development and career progression opportunities
- Work in a close-knit team where technical quality and professional judgement are genuinely valued
- Opportunity to build a long-term career across technology risk, information security and assurance

How to apply

Applications are treated with absolute confidentiality. Click APPLY or contact Clodagh at *******@decipherbureau.com for an informal conversation about your next career move. Equal opportunity and diversity are a priority. We encourage applicants from all backgrounds to apply.

Additional information

- Assistant Manager-level opportunity across IT Audit, IS Risk and Cybersecurity
- Brisbane CBD location | 4-5 days in office with 1 day WFH
- Contribute to complex medium and high-risk audits

📌 Assistant Manager - IS RISK (Brisbane)
🏢 Decipher Bureau
📍 Brisbane