Cloud Security Control Lead

3 weeks ago

Melbourne, Victoria, Australia Commonwealth Bank Full time
Cloud Security Control Lead (Senior Manager)Overview

The Cyber Controls Chapter Area plays an important function within the Group Security division, responsible for designing and deploying effective cyber control capabilities and overseeing continuous improvement of the Group's cyber risk profile.

As an organisation with a large IT estate servicing millions of customers every day, we need to ensure effective mitigations are in place to defend our assets against an ever-evolving cyber threat environment. The Control Lead Cloud Security is tasked with ensuring control capabilities are in place to identify security weaknesses and mitigate cyber threats to cloud-based asset classes (IaaS, PaaS, SaaS, containers) across the Group.

Working arrangements

We support our people with the flexibility to balance where work is done, with at least half your time each month connecting in office. We also have many other flexible working options available including changing start and finish times, part-time arrangements and job share. Talk to us about how these arrangements might work for you.

Responsibilities
  • Supporting Technology Crew Leads, Product Owners and Enterprise Architects in setting the control capability roadmap for cloud security, overseeing control operation, and delivery of control remediation to achieve target risk outcomes.
  • Establishing and maintaining cloud security standards and guidelines to align with changes in industry standards, technology strategy and threat intelligence.
  • Governing the Group's compliance with Cloud Security control requirements and supporting the business in tracking remediation of critical security weaknesses and improvement of overall risk posture.
  • Carrying out control effectiveness assessments, identifying control weaknesses and driving appropriate risk remediation across business-owned cloud-based assets.
  • Establishing automated control performance monitoring capabilities to support cloud security assurance over business-aligned technology services.
What you will bring
  • Embody the leadership principle of 'Curious and Humble' by being willing to speak up and challenge the status quo, and continually expand their skills and knowledge.
  • Expertise in cloud governance.
  • Knowledgeable about cyber threats and vulnerabilities relevant to cloud-based technologies.
  • Ability to analyse threat intelligence, identify potential risks, prioritise vulnerabilities, and recommend appropriate mitigations (Identity & Access Management, Cryptography, Secure Configuration, Data Security, Vulnerability Management, CIEM, CNAPP, CSPM, SSPM).
  • Experience working with cloud security enterprise solutions and implementing security tools in large and complex IT environments.
  • Ability to operate effectively in an agile environment with autonomy and self-initiate to achieve target outcomes.
  • Demonstrated ability to engage and influence stakeholders to build rapport, obtain buy-in and achieve target outcomes.
Desirable technical skills
  • Understanding of hybrid and cloud-native environments (e.g., AWS, Azure) and how security controls apply to them.
  • Applied knowledge of ASD ISM, NIST CSF, CIS and ACSC Essential Eight cyber mitigation strategies.
  • Proficiency in SSPM, CSPM, CNAPP, CIEM.
  • Experience with vulnerability prioritisation frameworks (e.g., CVSS, EPSS).
  • Understanding of web application vulnerabilities (e.g., OWASP Top Ten).
  • Security certifications: AWS/Azure security; CISSP, CISM.

Advertising End Date: 03/09/2025

#J-18808-Ljbffr

  • Cloud Security Control Lead

    3 weeks ago

    Melbourne, Victoria, Australia Commonwealth Bank Full time

    Cloud Security Control Lead (Senior Manager)OverviewThe Cyber Controls Chapter Area plays an important function within the Group Security division, responsible for designing and deploying effective cyber control capabilities and overseeing continuous improvement of the Group's cyber risk profile.As an organisation with a large IT estate servicing millions of...

  • Cloud Security Specialist

    2 weeks ago

    Melbourne, Victoria, Australia beBeeSecurity Full time $450,000 - $550,000

    Job Title: Cloud Security ExpertJob DescriptionAs a Cloud Security Expert, you will lead the design and implementation of enterprise security solutions with a strong focus on cloud environments. You will be responsible for embedding security into every layer of our technology landscape, ensuring compliance, resilience, and protection of critical data and...

  • Cloud Security Professional

    2 weeks ago

    Melbourne, Victoria, Australia beBeeSecurity Full time $138,000 - $198,000

    Job DescriptionYou are a skilled problem solver with experience in cloud security, specializing across AWS and Azure services.Cyber Security protects the bank and our customers from theft, losses, and risk events through effective and proactive management of cyber security, privacy, and operational risk.As a member of our Incident Response Cloud Security...

  • Cloud Security Lead

    2 weeks ago

    Melbourne, Victoria, Australia Ntt Full time

    **Is innovation part of your DNA? Do you want to enable a connected future for people, organizations, and society?**Join our growing global NTT team and you'll be part of the world's largest ICT company (by revenue). We've combined the capabilities of 28 remarkable companies to become one, leading technology services provider. Together, we help our people,...

  • Cloud Security Expert

    2 weeks ago

    Melbourne, Victoria, Australia beBeeSecurity Full time $200,000 - $220,000

    Job OverviewThis pivotal role significantly contributes to Telstra's security posture. The successful candidate will have expertise in telecommunications, cloud security, automation, infrastructure as code (IaC), and cyber security.The Senior Security Engineer will directly contribute to the protection and resilience of our Telco Cloud Networks by defining...

  • Cloud Security Manager

    1 week ago

    Melbourne, Victoria, Australia beBeeCloudSecurity Full time $150,000 - $180,000

    Cloud Security Manager Job DescriptionJob Title: Cloud Security ManagerWe are seeking an experienced Cloud Security Manager to join our team. The successful candidate will be responsible for developing and implementing security strategies to protect our cloud-based systems and data.Key Responsibilities:Develop and implement cloud security strategies to...

  • Chief Cloud Security Strategist

    2 weeks ago

    Melbourne, Victoria, Australia beBeeCloud Full time $120,000 - $180,000

    A leading organization is seeking a seasoned Chief Cloud Security Strategist to spearhead the development of robust cloud security frameworks.Key ResponsibilitiesCreate and implement secure cloud environments using major platforms like AWS, Azure, or GCP.Design email security solutions, including anti-phishing measures, spam filters, and secure...

  • Cloud Security Administrator

    1 week ago

    Melbourne, Victoria, Australia Ambulance Victoria Full time

    Location: Melbourne | Eastern MetropolitanJob type: Full timeOrganisation: Ambulance Victoria**Salary**: Salary not specifiedOccupation: IT and TelecommunicationsReference: AV/1756606-1At Ambulance Victoria we are proud to share our commitment to save and improve lives by providing outstanding care for our patients. It is our promise to every patient, and it...

  • Cloud Security Strategist

    1 week ago

    Melbourne, Victoria, Australia beBeeCompliance Full time $100,000 - $150,000

    Cloud Security Strategist Job DescriptionAs a Cloud Security Strategist, you will play a critical role in ensuring the security of our cloud services. You will lead and manage certification, accreditation, assurance, and authorization activities across our security program.Key Responsibilities:Serve as the Security Assurance leader for all components within...

  • Cloud Security Expert: Leading Innovations

    2 weeks ago

    Melbourne, Victoria, Australia Bebeecloudsecurity Full time

    Cloud Security Expert: Leading Innovations">We are seeking a seasonedSenior Cloud Security Consultantto join our team and contribute to pushing the boundaries of what is possible.">The ideal candidate will be an advanced subject matter expert with deep technical expertise in cloud security solutions, including design, deployment, integration, and...