Security Architect

Security Architect - Cyber Defense

Job Posting End Date:
Worker Type:
Fixed Term (Fixed Term)

**ABOUT THE JOB**
As a Security Architect at NAB, you will join security team to develop Cyber capabilities in securing IT system changes against threats, reduce security vulnerabilities, influence senior management and project leaders, in ensuring solution requirements meets the security objectives, and further the Group's pursuit of business opportunities

**YOUR JOB RESPONSIBILITIES**
- Delivering the conceptual and logical security design abstractions to identify threats and vulnerabilities as part of the solution Security Architecture
- Manage significant architectural decisions involving senior management, sponsors and projects to ensure secure outcomes and appropriate governance practices
- Leveraging and updating existing control reference patterns. Proactively managing risk and assurance requirements, developing new design artefacts to outline integration approaches, use-cases, re-use, and technical reference for Enterprise security capabilities
- Commit and execute on timely, high quality security output to support Projects' and stakeholders' motivations, resulting in the favourable management of Cyber risks
- Improve design & architectural efficiencies through leveraging and/or establishing processes, guidelines, methodologies and approaches
- Demonstrating professional etiquette, transparency, proactivity, teamwork & resourcefulness

**YOUR SKILLS AND EXPERIENCE**
Must have:

- 7+ years Security Architecture experience with focus on the SIEM control/(Customer) IAM/ IAM domain or 10+ years Solution Architecture experience with significant exposure in the SIEM/(Customer) IAM space
- Strong English communication skills (both verbal & written), especially in the global software development environment
- Degree in Computer Science / information systems or equivalent technical qualification
- The technologies we use in our Security practices are below. We don't expect you to know all of them, but having experience with AT LEAST ONE technology set below is a must

SA - Cyber Defence
- Threat lifecycle management; security log & event management (SIEM); user & system behaviour (UEBA); security orchestration& automation (SOAR); security incident response; contextual security correlation; cloud security models (IaaS; PaaD; SaaS)

SA - IAM (Workforce)
- Human & System authentication/authorisation, Adaptive authentication/authorisation, Identity Lifecycle Management & Governance, Interdomain
- Trust, Privileged Access Management, Directory Services, Identity's role in Zero Trust Architectures, Roles & Entitlements management, Cloud/SaaS IAM, Mainframe IAM, Secrets Management

SA - IAM (Customer)
- Thorough understanding & hands-on experience with Customer Identity & access management including authentication, authorization, lifecycle management
- Good technical understanding of other technology domains, namely cloud, DevOps, microservices, containerization & data protection

Nice to have:

- Appreciates complex solutions and technology landscapes, balancing trade-offs between business, technical and security drivers
- Awareness of the Product/Vendor market with the ability to execute on industry trends and good practices
- Security Certifications (e.g., CISSP, CCSP etc) would be beneficial
- Architecture or technology related certifications (e.g. SABSA, Cloud Security) would be beneficial
- Adaptable to various risk & security management frameworks

**THE BENEFITS AND PERKS**
We appreciate and reward our colleagues who do great work every day - from excelling for our customers, to taking ownership of an issue to get it resolved. Here's how we support our people with a range of exclusive benefits.

1. Generous compensation and benefit package
- Attractive salary
- 20-day paid annual leave and 7-day paid sick leave
- 13th month salary and Annual Performance Bonus
- Premium healthcare for yourself and family members
- Monthly allowance for team activities
- Premium welcome kit and occasional gifts of appreciation
- Extra benefits on your work anniversary

2. Exciting career and development opportunities
- Large scale products with modern technologies in banking domain
- Clear roadmap for career advancement in both technical and leadership pathways
- Access to digital learning platform such as Udemy
- Consistent and high-quality leadership training through the Distinctive Leadership program (DLP)
- Specialist capabilities and accreditations in key skill areas such as Cloud Engineering, Digital, Data, Security and SREs (Site reliability engineers)
- Professional banking qualifications through the Career Qualified in Banking (CQiB) program accredited by FINSIA.
- Sponsored English course with native teachers
- Opportunity for training in Australia

3. Professional and engaging working environment
- Hybrid working model and excellent work-life balance
- State-of-the-art & modern Agile office
- Food and beverages in the