Security Incident Response Operations Analyst

**You are**passionate about cyber incident response and seeking continuous improvement
- **We are**a high performing team continuously striving to drive outcomes
- **Together we can**continue to serve and protect millions of customers and their data

**See yourself in our team**:
Group Security protects the bank and our customers from theft, loss and risk events, through effective and proactive management of cyber security, privacy, fraud, physical security and operational risk.

The Security Incident Response team coordinates and communicates the triage, identification, assessment and mitigation of cyber security incidents for the bank and third-party providers to the group. The Team is passionate about identifying opportunities to leverage existing and new technologies to mitigate risks that span across cyber, fraud and protective security domains.

The Team has a 24/7 incident response capability requiring a call rotational roster one week a month.

This is a great opportunity to work with some of the best security minds in Australia to deliver pragmatic solutions to complex problems.

**Do work that matters**:
You will be expected to perform the following tasks in a manner consistent with CBA’s Values and People Capabilities.
- Perform cyber security incident response activities to identify, investigate and resolve incidents, as part of the Cyber Defence Operations function.
- Work within a 24/7 on call rotational roster one week a month, to enable the team to provide continuous incident response support. An additional allowance is paid for the on-call period.
- Improve current processes and tools to maximise the efficiency and productivity of the team’s technical capabilities.
- Analyse and prepare content for reports on incident activities to team members, stakeholders and the leadership.
- Provide expertise in emerging cyber security risks, trends and technologies
- Work within initiatives to assist with scoping and implementation of new processes and technology for identification, detection and response to security events.
- Work with the business, risk management and compliance stakeholders to ensure compliance with Group Policies, risk standards and obligations.
- Support the embedding of a risk and control culture across our business stakeholders.
- Work within a team environment and across business units to complete associated tasks with exceptional results.
- Encourage new ideas, embrace change, and continuously look for innovative ways of performing activities.

**We are interested in hearing from people who**:

- Have demonstrated experience in Cyber Security, ideally incident response, within financial services industry or similar field.
- Have knowledge across a breadth of Cyber Security domains
- Are a critical thinker, can work with ambiguity and provide clarity to stakeholders
- Have hands on experience developing reports/dashboards and providing analysis that informs and improves cyber situational awareness and security posture
- Have the ability to navigate and optimise security technologies and operations.
- Have a growth mindset and curiosity to explore and disaggregate complex problems
- Have strong communication, engagement and stakeholder management skills.
- Have the ability to work independently with guidance and to manage/execute tasks within set timeframes
- Have a risk mindset - all CommBank employees are expected to proactively identify and understand, openly discuss and act on current and future risks.

We're aware of some accessibility issues on this site, particularly for screen reader users. We want to make finding your dream job as easy as possible, so if you require additional support please contact HR Direct on 1800 989 696.

Advertising End Date: 28/07/2025