- Be a trusted adviser, problem-solver and business partner to Audit, Technology, Architecture, Engineering, Cloud, AI and Risk leaders.
- Ability to lead the strategy and delivery of Internal Audit’s Technology portfolio, providing independent assurance and constructive challenge across applications, platforms, middleware, cloud, engineering, technology operations, resilience, legacy technology and modernisation.
- Lead multidisciplinary teams and complex technology, transformation or assurance portfolios.

Our people are customer obsessed. They prioritise the needs and satisfaction of the customer above all else. Our mindset fosters innovation and creates strong, lasting customer relationships as we strive to be the most customer centric company in Australia and New Zealand.

As a Head of Audit Technology, you will join the Internal Audit team that’s focused on winning together. Lead the strategy and delivery of Internal Audit’s Technology portfolio, providing independent assurance and constructive challenge across applications, platforms, middleware, cloud, engineering, technology operations, resilience, legacy technology and modernisation.

In this Head of role, you will:

- Deliver high-quality audits and insights across applications, platforms, middleware, cloud, technology operations, resilience, engineering practices and legacy modernisation.
- Assess if technology services are well architected, scalable, resilient, observable, maintainable and operated with effective lifecycle, change and recovery controls.
- Evaluate cloud and platform outcomes across AWS and Azure, including landing zones, cloud-native services, shared platforms, DevOps, CI/CD, infrastructure as code, capacity, performance and cost management.
- Assess technology modernisation, including target-state architecture, migration and cutover, coexistence, technical debt reduction, legacy decommissioning, dependencies and avoidance of new legacy.
- Assess the technology foundations supporting AI and agentic solutions,



including compute, data and vector platforms, model and API gateways, RAG, Model Context Protocol (MCP) and orchestration, agent runtimes, workload identity, observability, resilience, cost controls and shutdown mechanisms. Coordinate with Security Audit on specialist cyber controls.
- Connect themes across portfolios, identify systemic risk and common failure modes, and work across all three lines of defence to influence practical risk-reduction outcomes.
- Build a high-performing, inclusive team and strong networks across architecture, engineering, cloud, platforms, AI, technology risk and industry.

What you will bring:

- Strategic technology leadership with the judgement to turn complex architecture, cloud, engineering and operational risks into clear assurance priorities and business outcomes.
- Robust technical breadth across applications, platforms and middleware, with practical understanding of APIs, microservices, networks, operating systems, databases, DevOps, CI/CD, containers and infrastructure as code.
- Deep understanding of AWS and Azure architecture, landing zones, shared services, cloud-native platforms, resilience, observability, capacity, performance, cost management and technology concentration risk.
- Sound understanding of AI and agentic technology foundations, including cloud compute, model and API gateways, data pipelines, RAG and vector platforms, Model Context Protocol (MCP), orchestration, agent runtimes, workload identity, observability, resilience and safe shutdown.
- Ability to assess technology modernisation, target architecture, technical debt, legacy risk, migration,



coexistence and decommissioning.
- Working knowledge of APRA CPS 230 and CPS 234, COBIT, ITIL, NIST, AWS and Azure Well-Architected Frameworks and relevant AI technology risk and governance practices.
- A relevant technology, engineering or computer science qualification, or comparable practical experience with cloud, architecture, engineering or audit certifications such as AWS, Azure, Google Cloud, Kubernetes, TOGAF, ITIL, CISA or CRISC are desirable.

We respectfully ask candidates to hold any questions until interview process, where we’ll discuss the role in detail and answer any questions. This helps to ensure a focussed, efficient and fair application process. The talent acquisition team looks forward to addressing all inquiries at that time if your application progresses.

A diverse and inclusive workplace works better for everyone

We know that our people make us who we are. That's why we have built a culture of equity and respect – where everyone feels valued and appreciated for being their authentic selves. In partnership with our multiple Employee Resource Groups (ERGs) we continue to foster an inclusive environment, where all NAB colleagues’ unique backgrounds and identities are understood, respected and celebrated.

We are committed to providing an environment where you can work your way.

For details on the recruitment process, and accessibility, please visit https://www.nab.com.au/about-us/careers/apply-for-job. To discuss adjustment requirements, please contact the NAB Careers team, via ***********@nab.com.au (please reference job number) or visit our Careers page through the link above for other contact options.

Join NAB

If you think this role is the right fit for you, we would love to hear from you. Please note candidate screening and interviews may be conducted prior to the closing date of the job advert. Unsolicited CVs from agencies will not be accepted.

📌 Head of Audit - Technology (Melbourne)
🏢 NAB
📍 Melbourne