Skip to main content
AfterDuty
Register CV

Control Manager Security Posture Management

Commonwealth Bank of Australia · Melbourne, Victoria

Type
Full-time
Posted
6 days ago

Overview

Your experience with risk assessment, procedure compliance, and incident response from policing aligns with the governance and control aspects of this role. However, the position demands deep technical expertise in cloud, SaaS, and security posture tools like Qualys and Wiz, which would require significant retraining beyond typical policing skills. Without a prior cyber security or digital forensics background, this role is a poor direct fit.

About this role

Control Manager Security Posture Management

  • Strengthen cyber security outcomes across SaaS, API, cloud and on-premises technology environments
  • Influence risk reduction and remediation activities across one of Australia’s largest technology ecosystems
  • Join a team investing in emerging security capabilities and security posture technologies

Do work that matters

As a Control Manager Security Posture Management, you will play a key role in maturing secure configuration management capabilities across the Group. You will partner with engineering, platform, technology and cyber security teams to strengthen security controls, improve configuration compliance and reduce cyber risk.

You'll help maintain and evolve secure configuration standards, drive remediation outcomes, and provide expertise across a growing suite of security posture technologies covering servers, workstations, cloud platforms, containers, SaaS applications and APIs.

See yourself in our team

Group Security is part of Technology and brings together security and resilience capabilities spanning cyber security, protective security and business resilience, fraud technology and operations, and cyber defence.

Within Group Security Technology, you'll join a team focused on secure configuration management, vulnerability management and security engineering outcomes. Working across a complex technology landscape, you'll collaborate with stakeholders to uplift security posture, strengthen governance practices and reduce cyber risk at scale.

In this role you will

  • Maintain and continuously improve the Secure Configuration Management Standard, ensuring alignment with organisational security policies, regulatory obligations and industry best practice.
  • Assess and monitor secure configuration controls, identifying opportunities to strengthen control effectiveness and support remediation activities.
  • Provide subject matter expertise across security posture management technologies, supporting configuration governance across servers, workstations, APIs, SaaS platforms, containers and cloud environments.
  • Drive risk reduction initiatives by identifying configuration-related security exposures, assessing impact and partnering with stakeholders to prioritise remediation activities.
  • Develop and maintain reporting, metrics and insights that provide visibility of configuration compliance, control health and security posture.
  • Partner with technology, engineering, platform and cyber security teams to promote secure-by-default configuration practices and improve security outcomes.
  • Build and maintain strong stakeholder relationships across technology, risk, audit and business teams.
  • Support assurance, audit and regulatory activities through evidence gathering, control validation and continuous improvement initiatives.

We're interested in hearing from people who

  • Have experience in cyber security, secure configuration management, vulnerability management or a related security discipline.
  • Have worked with security scanning, posture management or exposure management technologies such as Qualys, Wiz, Obsidian, NoName, or similar platforms.
  • Possess strong knowledge of cloud, SaaS, API, infrastructure or container technologies and the application of security controls within these environments.
  • Have demonstrated success influencing stakeholders and driving remediation outcomes across complex technology environments.
  • Understand security controls, governance frameworks, risk management and assurance practices.
  • Can analyse security findings, assess risk and translate technical issues into practical remediation actions.
  • Have experience using workflow and ticketing platforms such as ServiceNow.
  • Bring strong communication, stakeholder engagement and relationship management capabilities.

Working with us

At CommBank, we're committed to creating an accessible, inclusive and respectful workplace. If you require support or adjustments, please let us know. We welcome applications from people of all backgrounds and we're particularly committed to making a positive difference for Aboriginal and/or Torres Strait Islander Peoples.

For support please contact 1800 989 696.

If you're already part of the Commonwealth Bank Group (including Bankwest, x15ventures), you'll need to apply through Sidekick to submit a valid application. We’re keen to support you with the next step in your career.

We're aware of some accessibility issues on this site, particularly for screen reader users. We want to make finding your dream job as easy as possible, so if you require additional support please contact HR Direct on 1800 989 696.

Advertising End Date: 12/08/2026

About security roles for ex-police

Security management, operations and consultancy roles. Years of operational policing — command, incident response, public order — translate directly into corporate security, and employers in this sector actively rate police experience.

See all security jobs in Melbourne →

Why this fits a police background

  • Evidence & case files
  • Financial crime & fraud
  • Protection & firearms
  • Working to legislation & regulation

More security jobs for ex-police

  • Building Services Manager

    AirTrunk · Melbourne

    Full-time

    Your experience running a shift, custody suite, or operational unit gives you the people and process management skills this role needs from day one. You are used to managing vendors, compliance regimes, and security operations under pressure, and your background in incident command and multi-agency coordination directly supports the fire safety, evacuation planning, and physical security oversight required here.

    Posted Today

  • Security Officer

    Austin Health · Melbourne

    Full-time

    Your policing background gives you a strong foundation in conflict resolution, de-escalation, and maintaining order—exactly what this hospital security role demands. You already know how to conduct patrols, write incident reports, and manage CCTV systems, drawing on your experience of handling volatile situations with calm authority. The need to enforce policies and protect people and property is second nature to you, making this a natural step into a civilian security career.

    Posted 4 days ago

  • Senior Regional Security Manager, ANZ

    The Walt Disney Company · Melbourne

    Full-time

    You've spent years managing incidents, assessing threats, and coordinating multi-agency responses—this role demands exactly that. Your experience in command, crisis management, and building relationships with law enforcement maps directly onto leading security operations for Disney across ANZ. The job's focus on risk assessments, investigations, and emergency preparedness means you can step in and deliver from day one.

    Posted 5 days ago

  • Surveillance Lead

    Department of Transport and Planning · Melbourne

    Full-time

    A$100,894 – A$114,476Estimated

    Your experience in surveillance, monitoring compliance, and managing incidents on the ground translates directly to this role overseeing road maintenance quality and safety. The position requires coordinating field operations, ensuring regulatory adherence, and mentoring a team—skills you've honed through operational policing and shift management. Your ability to assess risk, enforce standards, and handle unexpected situations makes you a strong candidate for this assurance-focused role.

    Posted 6 days ago