Posted: 22/01/2025
Closing Date: 05/02/2025
Job Type: Permanent - Full Time
Location: Head Office - Collingwood
Job Category: Banking and Financial Services
Do you want to be part of using the business of banking as a force for good? Do you want to create positive impact for people and the planet? Bank Australia is the bank for people who want to be part of a movement creating a fairer and more just world.
We’re growing fast as more people choose to align their banking with their values. We’re a customer owned, B Corp certified bank. We empower our staff and 185,000+ customers to be part of the clean money movement.
We currently have a permanent, full time opportunity for an Information Security Analyst to join our Information Security team and contribute towards the establishment and maintenance of a well-structured and mature cyber security environment.
The Information Security Analyst will be responsible for detection, prevention, responding to and triaging of information security incidents. In addition you will play a key role in the team in building our information security situational awareness.

• Perform day to day monitoring, analysis, response and triaging of security alerts and incidents
• Triage phishing emails, taking appropriate containment and remediation actions to prevent security incidents
• Support vulnerability management and penetration testing processes
• Support information security threat intelligence and threat hunt capability
• Keep up to date with trends in information security and ensure appropriate controls are in place to protect Bank Australia from security threats
• Support testing and verifying security controls across both internal systems and systems managed by third parties
• Provide input into regular security reporting including security control status and trends in adversary behaviours
• Contribute to the deployment, maintenance and continuous improvement of Bank Australia’s information security capability
• Create and maintain security operational documentation
• Ensure continuous validation and uplift of incident response plans and play books
• Contribute a strong security voice to the business across various security domains including information security monitoring and threat prevention
• Ensure continuous compliance with policies, standards and best practice.