Security Principal

We’ve been trusted to serve Aussie communities since 1914 and grown to become a top 30-listed on the ASX with 120,000 team members and a portfolio of iconic brands. At Coles Group, you’ll not only get to make a difference to millions of Aussie lives—you’ll also get to see your impact.

**About the team**

Technology is the backbone of our business. Every day, our team solves complex and meaningful problems. Those solutions help thousands of our fellow team members succeed and make millions of customers lives easier every day.

The Security team at Coles is proud on their successful delivery of customer-focused solutions. There are a lot of exciting initiatives on the horizon as protecting our customers, team members and reputation is essential to being the most trusted retailer.

**About the role**

This is a highly sought-after greenfield opportunity for an experienced Workplace Security Principal to curity trends, technology and information that will positively affect products and services applies and integrates emerging technological trends to new and existing systems architecture, guide project and operational teams, undertaking the design of security aspects of solution, including operational model, security processes, technical subskills and components, implementation and integration, support the cyber security architecture roadmap and delivery program for the workplace security domain, defining inputs/outputs and processes for integrating with various groups across security and IT, including risk assessment, security detection and incidence response

In this role you will work closely with other Solution Architects to align the security requirements and the solution design with business drivers along with:

- Drive data protection strategy by enhancing feature set of existing solutions, executing proof-of-concepts in collaboration with architecture team, and will support improvements in BAU/operate capabilities for DLP and data classification capabilities
- Assist and lead with data protection business requirements for security controls on various technical platforms. Evaluate and recommend additional security controls and align with Data protection roadmap to meet current and future security needs, provide guidance upon complex projects, delivering workable and risk/threat-driven solutions.
- Responsible for high-level architectural design of all solutions within the data protection domain, in conjunction with the respective service managers for data loss prevention, data classification/encryption, access mgmt., incident response, etc.
- Ongoingly monitor and update data protection related control effectiveness and existing risks captured within GRC.

**About you & your skills**

You will be an experience leader within cyber security delivery and operations function, with a passion for driving for change, diversity, and delivery across the organisation.

You’ll also have:

- Experience improving data/Information security within a large enterprise across both structured and unstructured data environments
- Proven technical experience with security capabilities and technologies, such as but not limited to:

- Business engagement, to identify and coordinated treatment upon highly sensitive/critical data
- Ruleset effectiveness and governance, to support prioritised recommendations and reporting to data owners
- Shadow IT governance, managing unsanctioned and high-risk access, identifying broader security integration opportunities
- Working knowledge and experience with design and implementation of enterprise controls within regulated environments (i.e. PCI-DSS and Privacy legislation)
- Demonstrated experience influencing senior stakeholders across both technology and business domains
- Experience in mentoring and providing guidance to security consultants
- Experience in participating in formal architectural governance
- Ability to plan, organize, prioritise, and delegate tasks to complete
- Good verbal and communication skills with diverse cross functional groups, and the ability to present effectively to small and large groups

With us it’s not about the discounts (although you do get those), it’s about joining a team where your wellbeing and professional development is invested in and celebrating your contributions is the norm. And because everyone leads unique lives, we offer flexible work including work from home, additional leave and parental leave entitlements.

Job ID: 84240

Employment Type: Full time