Our client is a specialist technology risk, information security and assurance organisation working across a diverse portfolio of clients and complex enterprise environments. The team provides independent advice and assurance across IT risk, information security, governance, controls and technology environments. Their approach goes beyond traditional compliance and box-ticking, focusing on understanding how technology operates, identifying genuine areas of risk and providing practical recommendations that clients can act on.
Due to continued growth, they are looking for an experienced Assistant Manager (IS Risk) to join their Brisbane team. This is a leadership-focused prospect for someone with a strong background in IT audit, information security, cybersecurity, GRC or technology risk, who is ready to take ownership of multiple engagements and lead a team while remaining hands‐on with complex audit and assurance work.
The Role
As Assistant Manager, you will supervise a team across multiple engagements while contributing to medium and high‐risk audits. You'll take a lead role in reviewing audit work, applying professional judgement to complex technology and control environments, and ensuring high‐quality outcomes for clients. You'll be expected to challenge assumptions, assess technology risks critically and provide recommendations that stand up to scrutiny. You'll also work directly with clients and senior stakeholders, meaning strong communication and the ability to confidently discuss and defend audit findings are essential.
Key responsibilities:
Supervise and lead teams across multiple IT audit and technology risk engagements
Take responsibility for the quality, direction and review of audit working papers
Contribute to medium and high-risk IT audit and information security engagements
Apply professional judgement to analyse and evaluate technology practices, controls and identified gaps
Identify technology and information security risks and develop practical recommendations




Review the work of subject matter experts and ensure consistent quality across engagements
Support engagement planning, scoping, resourcing and delivery
Contribute to business plans, projects and work schedules to ensure successful delivery of engagements
Manage stakeholder communication throughout client engagements
Build and maintain productive relationships with clients and internal stakeholders
Present and communicate audit findings and recommendations to clients
Handle challenging conversations where clients question or disagree with findings
Support problem resolution and continuous improvement across the team
Apply audit and assurance methodologies consistently
Ensure work aligns with relevant information security standards, technology practices and assurance requirements
Identify opportunities to use new technologies, techniques and approaches to improve audit outcomes
Support change management and continuous improvement initiatives
Contribute to a culture of technical excellence, collaboration and knowledge sharing
What you'll bring
Strong experience in IT audit, information security, cybersecurity, GRC, technology risk or assurance
Experience supervising or leading teams across multiple audit, risk or consulting engagements
Demonstrated experience delivering medium and/or high-risk IT audit or assurance engagements
Strong understanding of IT risks, controls and information security practices
Sound knowledge of audit and assurance methodologies
Excellent professional judgement and ability to assess complex technology issues
Strong written and verbal communication skills
Excellent report writing skills and experience producing client-facing audit reports




Confidence presenting findings and recommendations to clients and senior stakeholders
Ability to defend recommendations and have constructive conversations when clients challenge findings
Ability to manage competing priorities across multiple engagements
Relevant tertiary degree in Information Technology, Cyber Security, Business, Commerce, Accounting or a related discipline
CISA, CISSP or another relevant professional certification is highly regarded
CPA Australia or CAANZ membership, or progress towards membership, is advantageous
Experience reviewing or managing ERP systems, databases, operating systems or network environments is highly regarded
Experience undertaking internal controls assurance engagements is advantageous
Australian working rights are required
What's in it for you?
Join a specialist technology risk and cybersecurity advisory team, work alongside experienced technology risk and information security professionals
Lead and supervise multiple client engagements
Work across complex technology, security and risk environments
Exposure to medium and high-risk audit and assurance engagements
Opportunity to develop your leadership, consulting and client management capabilities
Opportunity to contribute to methodology, innovation and continuous improvement
Strong exposure to senior stakeholders and complex enterprise environments
Brisbane CBD location, hybrid working arrangements
Competitive remuneration package
Professional development and career progression opportunities
Work in a close-knit team where technical quality and professional judgement are genuinely valued
Opportunity to build a long-term career across technology risk, information security and assurance
Additional information
Assistant Manager-level opportunity across IT Audit, IS Risk and Cybersecurity
Brisbane CBD location | 4-5 days in office with 1 day WFH
Contribute to complex medium and high-risk audits
#J-*****-Ljbffr

📌 Assistant Manager - Is Risk (Brisbane)
🏢 Decipher Bureau
📍 Brisbane