Westpac’s ISG provides advice, governance and investment across our cyber-security domains, including Identity and Access Management (IAM). As part of the IAM team, you will contribute to ISG’s overall mission by helping build our IAM strategy in conjunction with other cyber-security domains. You will have a keen interest in improving Cyber-Security outcomes, both with a long-term strategic lens and an immediate attention to current state. Cyber-security is rapidly evolving, so you will be able to work with a set of priorities that may change at short notice. Your key responsibilities may include:

• Assist in synthesising data related to emerging threats, vendor capabilities, regulator expectations and Westpac current IAM state for a variety of audiences.
• Contribute to the overall Cybersecurity strategy, with a particular focus on IAM
• Assist and advise the broader Westpac organisation (e.g., Security Architecture, Assurance and Risk) as required.

What’s in it for me? You will play an important and significant part in the future of a business that has been around for 200 years. Our vision is to become one of the world’s great service companies. So, we will back you in the development of your career, with internal career prospects and flexible working. You will also be backed by a fantastic team of people in a can-do, supportive structure.  Whatever shape your family takes, we offer generous paid and unpaid parental leave for your nominated primary and support carers. This includes leave to organise adoptions, surrogacy, and foster care arrangements.  What do I need? To be successful in this role, you will need excellent and verbal communication skills, strong stakeholder management experience and be self-driven. In addition to this, your skills may include:

• Five or more years of experience in Information Security or Information technology (IAM, or other cyber security domain preferable).
• Understanding of financial services industry, or other large enterprises, highly desirable.
• Exposure to regulatory and industry standards such as SOX, CPS234, NIST etc.
• Experience in large transformation projects desirable (business case development, project status reporting, process development etc.)
• Experience in data analytics, framework development, risk management, or OCM/communications.
• Formal education or certification in information security, information technology, risk management, audit or equivalent discipline.
• Industry certifications (CISSP, CISA, CISM, SABSA) desirable.