Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted today

Control Manager Vulnerability Management

CBA237 open roles

Where
Sydney CBD Area
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowControl Manager Vulnerability ManagementCBA · Sydney CBD Area

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on CBA's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

14.0% of postings close within 7 days. Measured by our own scanner across the market. CBA postings stay open a median of 13 days.

Share of postings closed within
  1. 2.3%1 day
  2. 4.7%3 days
  3. 14.0%7 days
  4. 22.5%14 days
  5. 38.3%30 days
  6. 59.0%60 days
This job: posted today

CBA median: 13 days open

The posting

Control Manager, Vulnerability Management

  • Do you thrive at the intersection of cyber security, technology, and stakeholder engagement?
  • Help drive vulnerability remediation, shape governance practices, and make a real impact across the organisation.
  • You are a cyber security, or controls professional with experience in vulnerability management, remediation governance and stakeholder engagement.
  • We are one of Australia’s leading cyber security teams, helping protect the Group, our customers and the community.
  • Together we can strengthen vulnerability management controls and improve remediation outcomes across a large, complex technology environment.

See yourself in our team:

The Cyber Controls Chapter Area sits within Group Security and is responsible for governing and continuously improving cyber control capabilities across the organisation.

As the Control Manager, Vulnerability Management, you will support the Control Lead in strengthening how vulnerability remediation is governed, measured and improved across the Group. You will work closely with technology teams, IT service owners and business stakeholders to help them understand their vulnerability posture, meet remediation expectations and address control gaps.

This is a governance and control-focused role. While familiarity with vulnerability scanning tools is useful, the primary focus is on remediation governance, control effectiveness, reporting, stakeholder engagement and continuous improvement.

We support our people with flexibility to balance where work is done, with at least half your time each month connecting in office. We also have flexible working options available, including changing start and finish times, part-time arrangements and job share. Talk to us about how these arrangements might work for you.

Do work that matters:

Working with the Control Lead Vulnerability Management, you will:

  • Support the ongoing management and continuous improvement of the Vulnerability Management Standard and related control requirements.
  • Govern vulnerability remediation activities by helping technology teams understand their vulnerability posture, remediation obligations and control compliance requirements.
  • Engage with IT service owners, technology domains and business units to support timely, risk-based remediation of vulnerabilities.
  • Assess and monitor control effectiveness, identify areas outside tolerance and work with stakeholders to understand root causes and improvement actions.
  • Develop and use dashboards, reporting and metrics to provide visibility of remediation compliance, control performance and security posture.
  • Assess and respond to ServiceNow (SNOW) requests relating to vulnerability management, including requests to exclude assets from scanning or defer vulnerabilities in line with policy requirements.
  • Support process improvement, assurance and audit activities through evidence gathering, control validation and continuous improvement initiatives.

We are interested in hearing from people who:

  • Have experience in cyber security, vulnerability management, security operations, infrastructure, cloud, engineering or technology controls.
  • Understand vulnerability management concepts, including vulnerability identification, prioritisation, remediation governance and risk-based decision making.
  • Strong understanding of cloud.
  • Can confidently engage with technical stakeholders and constructively challenge assumptions around remediation timelines, risk acceptance and control compliance.
  • Are comfortable working with data, dashboards and reporting to identify trends, insights and areas requiring attention.
  • Bring a continuous improvement mindset and can help build practical, stable and scalable processes.
  • Are curious, humble and confident enough to speak up, challenge constructively and keep building their knowledge.

Technical skills that will benefit you in the role

  • Understanding of cyber security risk frameworks and guidance, including ASD Essential Eight, ASD ISM, NIST and related control frameworks.
  • Experience with vulnerability prioritisation and risk assessment, including frameworks such as CVSS and EPSS.
  • Familiarity with vulnerability scanning or exposure management tools such as Qualys, Wiz or Microsoft Defender.
  • Familiarity with patch management tools or processes, including Tanium or similar enterprise technologies.
  • Understanding of vulnerabilities across servers, endpoints, cloud environments, web applications and related technology platforms.
  • Experience in technology controls, cyber controls or risk governance will be highly regarded, but we are also open to candidates with strong technical cyber or technology backgrounds who can confidently engage with stakeholders.
  • Security certifications such as CISSP, CISM or CRISC are advantageous, but not mandatory.

If you're already part of the Commonwealth Bank Group (including Bankwest, x15ventures), you'll need to apply through Sidekick to submit a valid application. We’re keen to support you with the next step in your career.

We're aware of some accessibility issues on this site, particularly for screen reader users. We want to make finding your dream job as easy as possible, so if you require additional support please contact HR Direct on 1800 989 696.

Advertising End Date: 26/11/2026

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against CBA's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on CBA's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    CBA's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.