Control Lead Data Loss Prevention at Commonwealth Bank

Sydney, New South Wales, Australia -

Full Time

Start Date

Immediate

Expiry Date

15 Oct, 26

Salary

0.0

Posted On

17 Jul, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Data Loss Prevention, Cyber Security, Technology Risk, Information Security, Data Protection, Team Leadership, Incident Triage, Security Governance, Risk Management, Stakeholder Management, Control Monitoring, Reporting and Metrics

Industry

Financial Services

Description

Control Lead, Data Loss Prevention Protect sensitive information by strengthening controls that detect, prevent and respond to data leakage and loss. Lead control outcomes across End User Data Loss Prevention, supporting alerting, blocking, investigation, escalation and reporting. Contribute to Group Security’s purpose of safeguarding a brighter future for all by securing the bank and protecting customers. Do work that matters: As a Control Lead, Data Loss Prevention, you’ll play an important role in helping CommBank protect sensitive information from leakage or loss through end-user electronic data transfers to external destinations. You’ll support the effective operation, uplift and oversight of Data Loss Prevention controls, helping ensure events are inspected, reviewed, investigated and resolved in line with Group policies, standards and guidelines. This includes supporting baseline inspection rules, alert and blocking processes, triage and response processes, escalation pathways, exemptions, governance, metrics and reporting. This is a meaningful opportunity to work across security, risk, technology and business teams to strengthen how sensitive information is protected across the Group. See yourself in our team: Group Security is part of Technology and brings together capabilities across Group Security Office, Group Cyber Security, Protective Security and Business Resilience, Group Fraud Technology, Group Fraud Management Services and Cyber Defence Operations. You’ll be part of a team focused on managing cyber risk today while investing for the future through intelligent governance, protection, detection, response, recovery and resilience. In this role, you will: Lead and support the effective operation of End User Data Loss Prevention controls that detect or prevent sensitive information leaving the Group. Support baseline inspection rules used to identify sensitive information and help ensure rule sets remain effective for alerting and blocking. Oversee control processes for onboarding, reviewing, uplifting and offboarding inspection rules. Support the triage, investigation, closure, supervision and escalation of Data Loss Prevention alerts, including timely resolution pathways. Work with Group Security and Business Unit responders to ensure alerts are assigned, investigated, resolved and escalated where required. Contribute to governance, metrics and reporting that measure control performance, identify out-of-tolerance outcomes and support remedial action. Support processes that identify and restrict end-user initiated data transfers to SaaS services, where required. Help maintain exemption processes for users excluded from control monitoring, including approved timeframes and appropriate records. We’re interested in hearing from people who have: Experience in cyber security, technology risk, technology controls, information security, data protection or a related discipline. Practical experience with Data Loss Prevention controls, including monitoring, alerting, blocking, triage, investigation or control improvement. Demonstrated leadership experience and ability to lead a team of 3 Analysts. Strong understanding of sensitive information handling, data leakage risk and security control environments. Experience working with policies, standards, control requirements, governance, metrics or reporting. Confidence partnering with business, technology, risk and security stakeholders to drive clear control outcomes. An ability to translate control requirements into practical processes that are sustainable and easy to operate. A collaborative, curious and outcome-focused approach to protecting customers, colleagues and the organisation. Working with us: At CommBank, we're committed to creating an accessible, inclusive and respectful workplace. If you require support or adjustments, please let us know. We welcome applications from people of all backgrounds and we're particularly committed to making a positive difference for Aboriginal and/or Torres Strait Islander Peoples. For support please contact 1800 989 696. If this sounds like the right next step for you, apply now. We’d love to hear from you. If you're already part of the Commonwealth Bank Group (including Bankwest, x15ventures), you'll need to apply through Sidekick to submit a valid application. We’re keen to support you with the next step in your career. We're aware of some accessibility issues on this site, particularly for screen reader users. We want to make finding your dream job as easy as possible, so if you require additional support please contact HR Direct on 1800 989 696. Advertising End Date: 30/07/2026 Whether you’re passionate about customer service, driven by data, or called by creativity, a career with CommBank is for you. Our people bring their diverse backgrounds and unique perspectives to build a respectful, inclusive and flexible workplace. One where we’re driven by our values, and supported to share ideas, initiatives, and energy. One where making a positive impact for customers, communities and each other is part of our every day. Here, you’ll thrive. You’ll be supported when faced with challenges, and empowered to tackle new opportunities. We really love working here, and we think you will too.

Responsibilities

Lead the operation and oversight of End User Data Loss Prevention controls to prevent sensitive information leakage. Manage the triage, investigation, and escalation of security alerts while contributing to governance and performance metrics.