Security Analyst

Security Analyst

• You are an multi-skilled security analyst looking for your next challenge.
• We are one of the best and most advanced Cyber Security groups in Australia.
• Together we can contribute to protecting the Bank, Customers, and the Community.

Your Business:

Cyber Security protects the bank and our customers from theft, loss, and risk events, through effective and proactive management of cyber security, privacy, and operational risk.

Your new team:

The Technical Security Verification (TSV) team sits within Group Security Engineering and is responsible for developing and operating the Security Verification function for new-to-bank services and material technology changes. Through evidence-based verification, reporting and continuous improvement initiatives, the team helps strengthen how Cyber Security requirements are validated and governed across the organisation.

This is a unique dual-purpose role that combines security analysis with operational support and strategic intent. You will work across multiple teams within Product Security, helping shape the future direction of the TSV function while driving the evolution of the Group Security engagement portal. From developing new operating processes and reporting capabilities to improving how users access and interact with security services, you will have the opportunity to influence both strategic initiatives and day-to-day operational outcomes.

Do Work that matters:

In this role, you will:

• Own and evolve the Group Security engagement portal (JSM), improving how users discover, request and engage with security services, while defining and delivering a clear roadmap to modernise the platform, improve service adoption and enhance the overall user experience.
• Support the ongoing maturity of the Technical Security Verification (TSV) function through automation,, framework development, workflow optimisation, and AI.
• Assist with the development and management of Security reporting, metrics and executive insights, including supporting associated dashboards.
• Identify opportunities to automate manual processes, improve data quality and streamline the management of security verification activities.

We are interested in people who have:

• Hands-on experience administering and enhancing Jira Service Management (JSM), and related collaboration platforms, including workflows, forms, automation, reporting and knowledge management capabilities.
• Experience working within Cyber Security or Security Engineering, with a sound understanding of security controls, DevSecOps practices and secure-by-design principles.
• Strong analytical and problem-solving skills, with experience developing frameworks, operating models, processes, documentation, workflows and continuous improvement initiatives.
• Experience supporting governance, reporting, metrics, dashboards and executive-facing insights, with the ability to analyse data and communicate outcomes clearly to stakeholders.
• Strong stakeholder engagement and requirements gathering skills, with experience translating business and technical needs into user stories, backlog items and practical solutions delivered through Agile teams.