Trách nhiệm chính

• Lead and ensure delivery of the V&EM operational and strategic plan, aligned to function goals and KPIs.
• Manage and develop a direct team, with clear accountability for remediation and operational outcomes.
• Drive asset owners, application teams and technology teams to remediate vulnerabilities and security non‑compliances within approved timeframes.
• Lead complex and cross‑portfolio remediation campaigns, with clear owners, milestones, dependencies and target dates.
• Challenge inadequate remediation plans, unsupported delays and missed commitments; elevate barriers with evidence and recommended management actions.
• Drive sustainable reduction in overdue vulnerabilities, recurring findings and accumulated security debt.
• Ensure applications on decommissioning or replacement plans continue to remediate vulnerabilities or apply appropriate governance until exposure is removed.
• Maintain an effective governance cadence and ensure overdue populations have current, credible remediation plans.
• Apply risk‑based prioritisation using severity, exploitability, exposure, asset criticality and business impact.
• Review deferrals, exceptions, false positives and compensating controls for completeness and supporting evidence.
• Drive remediation of infrastructure, cloud, application, container, end‑user and externally exposed findings.
• Identify systemic control weaknesses and recurring causes; lead root‑cause analysis and preventative improvement.
• Provide practical technical direction and clear reporting on risk, progress, blockers and required actions.
• Identify and deliver selected AI, automation and workflow improvements that reduce manual effort and improve remediation capacity, while maintaining validation, human oversight and auditability.
• Ensure vulnerability ownership, asset mapping, remediation status, target dates and supporting evidence are accurate.
• Oversee timely and accurate operational, management, and executive reporting.
• Ensure policies, standards, processes and controls meet regulatory and compliance expectations; manage controls, findings and treatment plans.
• Support response to emergency vulnerabilities and cyber security incidents as required.
• Stay abreast of current and emerging vulnerabilities, technologies and remediation practices.
• Other activities as required by management.

Yêu cầu

• 10+ years in cyber security, vulnerability management, security operations, technology risk or a related role.
• 3+ years leading teams.
• Degree in Cyber Security, Information Technology, Computer Science, or a related discipline.
• Relevant industry certifications are highly regarded.
• Demonstrated experience driving complex remediation outcomes across enterprise technology environments.
• Experience influencing senior stakeholders and improving operational processes.
• Key capabilities: Delivery execution and people leadership; Stakeholder engagement and influencing; Risk management and compliance; Vulnerability and exposure management; Technical analysis and risk‑based prioritisation; Reporting, data interpretation, and continuous improvement; AI and automation implementation; Knowledge of cloud, infrastructure, application, and container security.

Mức lương

• Thỏa thuận

Phúc lợi

• Generous compensation and benefit package.
• Attractive salary.
• 20‑day paid annual leave and 7‑day paid sick leave.
• 13th month salary and Annual Performance Bonus.
• Premium healthcare for yourself and family members.
• Monthly allowance for team activities.
• Premium welcome kit and occasional gifts of appreciation.
• Extra benefits on your work anniversary.
• Exciting career and development opportunities.
• Large scale products with modern technologies in banking domain.
• Clear roadmap for career advancement in both technical and leadership pathways.
• Access to digital learning platform such as Udemy.
• Consistent and high‑quality leadership training through the Distinctive Leadership program (DLP).
• Specialist capabilities and accreditations in key skill areas such as Cloud Engineering, Digital, Data, Security and SREs (Site reliability engineers).
• Sponsored English course with native teachers.
• Opportunity for training in Australia.
• Professional and engaging working environment.
• Hybrid working model and excellent work‑life balance.
• State‑of‑the‑art & modern Agile office.
• Food and beverages in the office pantry.
• Employee Assistance Program to improve your physical and mental health.
• Annual team activities and company events.
• A solid and talented team behind you – great people who love what they do.

Hình thức làm việc

• Hybrid working model

Thông tin khác

• Job Posting End Date:
• Maximum Term/Fixed Term (Fixed Term)