It's more than just a career!

ABOUT THE JOB

As a Security Architect at NAB, you will join security team to develop Cyber capabilities in securing IT system changes against threats, reduce security vulnerabilities, influence senior management, and project leaders, in ensuring solution requirements meets the security objectives, and further the Group’s pursuit of business opportunities

YOUR JOB RESPONSIBILITIES

• Providing Security Architecture consultancy style subject matter expertise. Includes handing difficult conversations and influencing colleagues in realising the need for security
• Delivering the conceptual and logical security design abstractions to identify threats and vulnerabilities as part of the solution Security Architecture
• Analysing systems, applications and system components to identify risks and propose mitigating security controls and countermeasures.
• Manage significant architectural decisions involving senior management, sponsors and projects to ensure secure outcomes and appropriate governance practices.
• Leveraging and updating existing control reference patterns. Proactively managing risk and assurance requirements, developing new design artefacts to outline integration approaches, use-cases, re-use, and technical reference for Enterprise security capabilities
• Coaching and mentoring others in the practical application of security and risk management concepts, principles and strategies, and relevant industry standards
• Commit and execute on timely, high quality security output to support Projects’ and stakeholders’ motivations, resulting in the favourable management of Cyber risks
• Improve design & architectural efficiencies through leveraging and/or establishing processes, guidelines, methodologies and approaches.

YOUR SKILLS & EXPERIENCE

Must have

• 7+ years Security Architecture experience with focus on Cyber Assurance control domain or 10+ years Solution Architecture experience with significant exposure in the Cyber Assurance space
• Strong English communication skills (both verbal & written), especially in the global software development environment
• Threat lifecycle management; security log & event management (SIEM); user & system behaviour (UEBA); security orchestration& automation (SOAR); security incident response; contextual security correlation; cloud security models (IaaS; PaaD; SaaS)
• Good technical understanding of other technology domains, namely identity & access management, data protection, vulnerability management, database security, application security, network security and DevSecOps
• Degree in Computer Science / information systems or equivalent technical qualification

Nice to have

• Awareness of the Product/Vendor market with the ability to execute on industry trends and good practices
• Security Certifications (e.g., CISSP, SABSA etc) would be beneficial
• Adaptable to various risk & security management frameworks

THE BENEFITS AND PERKS