Control Manager Vulnerability Management

1 week ago

Sydney, Australia Commonwealth Bank Full time

**Control Manager Vulnerability Management**
- **_You are _**_a cybersecurity risk and control professional with a background in Vulnerability Management control design and implementation _
- **_We are one _**_of the best and most advanced Cyber Security teams in Australia _
- **_Together we can _**_build the Cyber Controls Chapter Area and contribute to protecting the Group, its customers and community. _

**See yourself in our team**:
The Cyber Controls Chapter Area plays a crucial function within the Group Security division being responsible for designing and deploying effective cyber control capabilities and overseeing continuous improvement of the Group’s cyber risk profile.

As an organisation with a large IT estate servicing millions of customers everyday, we need to ensure effective mitigations are in place to defend our assets against an ever-evolving cyber threat environment. The Control Lead Vulnerability Management will lead a team tasked with ensuring control capabilities are in place to identify and remediate security weaknesses across the Group in a timely and effective manner.

We support our people with the flexibility to balance where work is done with at least half your time each month connecting in office. We also have many other flexible working options available including changing start and finish times, part-time arrangements and job share to name a few. Talk to us about how these arrangements might work for you.

**Do work that matters**
Working with the Control Lead Vulnerability Management the Control Manager will:
Analyse vulnerability scan results to identify and prioritise critical security risks based on severity, exploitability, and potential business impact. Work closely with technology teams to support remediation efforts and verify improved security posture. Remain current with emerging threats and share knowledge with colleagues to drive continuous improvement. Support the Control Lead Vulnerability Management in monitoring the Group’s compliance with the Vulnerability Management Standard.

**We are interested in hearing from people who**:

- Embody the leadership principle of ‘Curious and Humble’ by being willing to speak up and challenge the status quo, and continually expanding their skills and knowledge.
- Are knowledgeable about cyber threats and vulnerabilities relevant to server, network, and endpoint security.
- Can analyse threat intelligence, identify potential risks, prioritise vulnerabilities, and recommend appropriate mitigations.

**Technical Skills that will benefit you in the role**:

- Applied knowledge of ASD ISM, NIST, CIS and Essential Eight cyber mitigation strategies.
- Proficiency in vulnerability scanning tools (e.g., Tenable Nessus, Qualys, Rapid7, etc.).
- Experience with vulnerability prioritisation frameworks (e.g., CVSS, EPSS).
- Familiarity with patch management tools (e.g., Microsoft SCCM, WSUS, Ivanti).
- Experience with data visualisation tools (e.g., Power BI, Tableau) and proficiency in creating executive-level dashboards and reports.
- Security certifications: CISSP, CISM, or CRISC.

We're aware of some accessibility issues on this site, particularly for screen reader users. We want to make finding your dream job as easy as possible, so if you require additional support please contact HR Direct on 1800 989 696.

Advertising End Date: 16/02/2025

  • Cyber Security Vulnerability Manager

    6 days ago

    Sydney, New South Wales, Australia Qantas Full time $120,000 - $180,000 per year

    Founded in the Queensland outback in 1920, Qantas has grown to be Australia's largest regional, domestic, and international airline. Qantas has a range of subsidiary businesses that support the overall operations of the Group. The Qantas Group's main business is the transportation of customers and freight using two complementary airline brands — Qantas and...

  • Product Owner

    7 days ago

    Sydney, Australia Commonwealth Bank of Australia Full time

    Product Owner - Vulnerability & Secure Configuration Management **Product Owner - Vulnerability & Secure Configuration Management** - **You are a problem solver with a background in product ownership within cyber security.**: - **We are one of the best and most advanced cyber security teams in Australia.**: - **Together we can contribute to protecting the...

  • Product Owner

    1 week ago

    Sydney, Australia Commonwealth Bank Full time

    **Product Owner - Vulnerability & Secure Configuration Management** - **You are a problem solver with a background in product ownership within cyber security.**: - **We are one of the best and most advanced cyber security teams in Australia.**: - **Together we can contribute to protecting the Group, customers and community.** **Your business**: The...

  • Cyber Vulnerability Management Analyst

    3 days ago

    Sydney, Australia AMP Limited Full time

    The Vulnerability Management Analyst role is a business focused, yet hands-on technical role, focusing on vulnerability management identification, and supporting our Compliance and technical teams in successful vulnerability remediation. This includes working with our managed services provider to manage our vulnerability identification tools, monitoring and...

  • Senior Business Analyst@Cyber Vulnerability Management

    2 weeks ago

    Sydney, New South Wales, Australia BURGEON IT SERVICES Full time $80,000 - $120,000 per year

    Position:Senior Business Analyst; Cyber Vulnerability Management TowerLocation: SydneyDuration: 6 monthsFor success in this role, candidates should have an Intimate awareness of Cyber Security Controls, Design Efficiency and Operating Efficiency. The ability to combine this with strong and clear communication skills, a demonstrated ability to work directly...

  • Cyber Vulnerability Management Analyst

    5 days ago

    Sydney, Australia Leidos Full time

    Company Description Our name isn’t the only thing that’s unique about Leidos Australia. We’re a complex systems integration company building world-class solutions across government and Defence that ensure peace of mind for the entire nation. Supported by global backing from our US network, we’re trusted by our customers to deliver the most...

  • Manager, Vulnerability Posture Management

    2 weeks ago

    Sydney, Australia Reserve Bank of Australia Full time

    Your Team You will lead a team of cybersecurity experts, part of a larger multi-disciplinary security services team sitting across the full spectrum of cybersecurity roles. There is a strong culture for collaboration, innovation and celebrating personal successes. The team is constantly looking to improve and welcomes fresh perspectives and ideas. About...

  • Quality Control Manager

    7 days ago

    Sydney, Australia Excel Building Management Full time

    **Company Description** Tru Brite Cleaning Services is a sister company to Excel Building Management, a leading provider of building and facilities management services to Sydney's high-end residential and commercial strata markets. With over 32 years of experience, Tru Brite has developed strong relationships with strata managers, becoming a trusted cleaning...

  • Risk Frameworks and Controls Manager

    2 weeks ago

    Sydney, Australia LGT Crestone Wealth Management Full time

    Min Experience- 7-12 yearsYour team - The Risk, Legal and Compliance Team consists of 24 people with varying areas of expertise, who are based in Sydney and Melbourne - Our work includes risk, compliance, legal, financial crime, regulatory liaison, information security, company secretarial, policy and assurance functions - The team has extensive interaction...

  • Embedded Crisis Manager

    1 week ago

    Sydney, Australia Control Risks Full time

    Control Risks' Embedded Consulting Practice is growing in Sydney, and we have a great opportunity for someone with a few years of experience in the areas of crisis management, risk management, or corporate security to join our team. As part of a regional team, this role will be embedded within a multinational tech client and will provide structured and...