Control Manager, Identity for AI

Commonwealth Bank

Manager leading design and governance of cyber security controls for AI identity risks. Collaborating with technology and engineering teams to ensure robust governance and control measures in place.

Posted 7/3/2026full-timeSydney • 🇦🇺 AustraliaMid-LevelSeniorWebsite

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Lead the design and approval of new Identity for AI controls, including defining control purpose, scope, objectives, criteria and supporting governance artefacts.
Deliver the control and requirements outcomes for a strategic Risk Management Declaration (RMD) commitment, ensuring milestones are achieved through established governance processes.
Partner with Enterprise Architecture and technology delivery teams to understand emerging AI identity capabilities and ensure control requirements evolve in parallel with solution design.
Translate complex technical concepts—including AI agent identities, authentication, authorisation, lifecycle management and delegated access—into clear risk statements, standards, guidance and control requirements.
Navigate complex stakeholder environments to build consensus across Cyber Security, Technology, Risk, Architecture and AI delivery teams.
Lead the closure of associated RiS issues by coordinating evidence collection, demonstrating control uplift and obtaining endorsement from applicable risk and assurance stakeholders.
Support the development of Identity for AI standards and guidance to enable consistent implementation across the Group.
Educate stakeholders on emerging AI identity risks and the importance of a robust control environment.

Requirements

What you’ll need

Experience in Cyber Security Controls, Cyber Security Risk, Identity and Access Management, or Technology Risk within a large, complex organisation.
A foundational understanding of Identity and Access Management concepts, including authentication, authorisation, identity lifecycle management and delegated access.
A strong risk mindset, with the ability to translate technical concepts into practical control requirements, standards and risk outcomes.
An interest in AI, Agentic AI and emerging identity-related threats, with a willingness to rapidly build domain expertise.
Experience designing, assessing or uplifting cyber security controls and working through governance approval processes.
Excellent stakeholder management and communication skills, with the ability to influence across technology, architecture, engineering and risk functions.
The ability to work effectively in highly ambiguous environments, bringing structure and clarity to emerging problems while maintaining delivery momentum.

Benefits

Comp & perks

flexibility to balance where work is done
at least half your time each month connecting in the office
many other flexible working options available including changing start and finish times, part-time arrangements and job share

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

AuthenticationAuthorisationIdentity Lifecycle ManagementControl RequirementsRisk AssessmentControl UpliftAI Identity RisksTechnical TranslationGovernance ApprovalEmerging Identity Threats

Soft Skills

Excellent CommunicationInfluencing SkillsProblem-SolvingAdaptabilityConsensus Building