Job Posting End Date:
Worker Type:
Maximum Term/Fixed Term (Fixed Term)
Security Compliance & Obligations team is part of Security Advisory & Governance within Group Security organisation.
YOUR JOB RESPONSIBILITIES
Ensuring NAB’s ongoing and sustainable compliance to all security related regulatory obligations, industry requirements and contractual commitments to customers and partners.
The activities include, but not limited to, conducting assessments and identification of gaps, the establishment of the processes and the execution of controls where owned by the Security Compliance & Obligations team, ensuring the control owners have appropriate processes and controls in place, regular reporting to relevant stakeholders and escalations of concerns to senior management where required.
Fulfilling customer and tender requests by completing security related due diligence questionnaires with accuracy and consistency
Primary and central point of engagement into Group Security for all security related obligations and regulatory and audit related information requests and consultations
Facilitation of or contribution towards regulatory or government consultation papers and directives
Participate actively in annual Industry Attestations as key Group Security representative and as value added member of the working group
Drive and enhance security risk awareness and culture with key stakeholders as part of ongoing interaction
Fulfill customer or tender security related due diligence questionnaires with accuracy and consistency using standard responses
Where standard responses are not available, gather appropriate information from intranet or other available information sources or technology teams, craft appropriate responses that meet the requirements / intent of the questions and develop repeatable answers without exposing NAB or its products to undue risk.
YOUR SKILLS AND EXPERIENCE
3-5+ years experience working in technology and security risk, governance and compliance in a large institution (Financial services preferred)
Strong English language skills (both spoken and written)
Ability to understand information security requirements (regulatory, industry, internal policies etc..) of varying complexities and translate them into controls
Experience with all aspects of information security control management life cycle, conducting assessments and assessing risks & compliance
Ability to navigate large and complex environment to gather appropriate information
Technical experience advantageous
Experience facing into multiple stakeholders including external parties
Strong analytical skills
THE BENEFITS AND PERKS
We appreciate and reward our colleagues who do great work every day - from excelling for our customers, to taking ownership of an issue to get it resolved. Here's how we support our people with a range of exclusive benefits.
1. Generous compensation and benefit package
Attractive salary
20-day paid annual leave and 7-day paid sick leave
13th month salary and Annual Performance Bonus
Premium healthcare for yourself and family members
Monthly allowance for team activities
Premium welcome kit and occasional gifts of appreciation
Extra benefits on your work anniversary
2. Exciting career and development opportunities
Large scale products with modern technologies in banking domain
Clear roadmap for career advancement in both technical and leadership pathways
Access to digital learning platform such as Udemy
Consistent and high-quality leadership training through the Distinctive Leadership program (DLP)
Specialist capabilities and accreditations in key skill areas such as Cloud Engineering, Digital, Data, Security and SREs (Site reliability engineers)
Sponsored English course with native teachers
Opportunity for training in Australia
3. Professional and engaging working environment
Hybrid working model and excellent work-life balance
State-of-the-art & modern Agile office
Food and beverages in the office pantry
Employee…