Security Insights Consultant

Organization:- At CommBank, we never lose sight of the role we play in other people's financial wellbeing. Our focus is to help people and businesses move forward to progress. To make the right financial decisions and achieve their dreams, targets, and aspirations. Regardless of where you work within our organisation, your initiative, talent, ideas, and energy all contribute to the impact that we can make with our work. Together we can achieve great things.

Job Title :- Security Insights Consultant

Location : - Bangalore

Business & Team :-

Cyber Security protects the bank and our customers from theft, loss, and risk events through effective and proactive management of cyber security, privacy and operational risk.

Cyber Defect and Finding management capability focuses on driving remediation of technical security findings which if unmanaged can lead to unforeseen threats. The team is building industry leading model to aggregate and prioritise vulnerabilities across cyber technology and capabilities to help the organisation make metric-based decisions on how to improve our security posture. 

This new team of focused security professionals are dedicated to prioritising vulnerabilities which need attention and remediation. The team is also instrumental in looking for opportunities to automate processes that aggregate defects and findings coming out of technologies support cyber controls and capabilities. This team will support Cyber Security requirements as aligned to our DevSecOps strategy.

We aim to consolidate and automate a security posture view of security gaps, to simplify and prioritise remediation tasks. This role will support integration requirements across multiple teams the roadmap of modernisation and automation capabilities.

Impact & contribution :-

Reporting to the Crew Lead, you will be a technical Subject Matter Expert (SME) in the vulnerability and secure configuration domain.

You will:

• Partner with the Control Lead to ensure that the product roadmap meets the control objectives
• Lead a squad within our Pace ways of working driving various ceremonies and quarterly planning cycles to ensure the squad is clear on deliverables, priorities and is meeting its targets
• Offer technical expertise across design, services, and solutions to key stakeholders across the organisation
• Create a technology roadmap and product lifecycle for product / control adherence, including the management of delivery risks and dependencies
• Govern the technical decisions (e.g., product enhancements, connectors) and sign-off solutions
• Manage / own technology risk e.g., End of Support, vulnerabilities etc.
• Participate audits and work with leads and owners to prioritise remediation of agreed findings
• Renewals (such as licence and contracts) D
• Define and contribute evaluation criteria into the vendor selection process and provide feedback and recommendations to RFI/RFP Process

Roles & Responsibilities: -

• Engaging ServiceNow engineers and ensuring all stakeholder requirements are embedded in design
• work with the ServiceNow VR module to integration and leverage its APIs to meet our requirements
• contribute to remediation process workflow and expand process to much broader scope
• demonstrate your service management skills to engage stakeholders and prioritise remediation action
• contribute to automation of observability logs and metrices, including dashboard, monitoring and alerting
• write and maintain efficient, reusable code in JavaScript and Java
• review and be able to understand the threat vector in various vulnerability scanning tools which scan infrastructure, Cloud, API and container and applications within Bank.

Essential Skills :-

• Experience :- 8 to 12 Years
• Proficient with JIRA, Confluence, Scrum and Agile framework and culture. 
• Good understanding of DevOps, CI/CD, system integrations. APIs and software engineering as well as understanding of operations and service management would be beneficial for this role
• Are familiar with the full software development lifecycle (SDLC) with a focus on excellent User Experience, CI/CD, automated testing, infrastructure cloud pipelines, logging and monitoring
• Working experience with Service now development along with CMDB is highly desirable for this role
• Excellent analytical and problem-solving skills
• Work independently and as part of a team
• Have strong written and verbal communication skills
• A clear customer focus and passion for improving the financial wellbeing of our customers.

Education Qualification :-

• Bachelor's degree or Master's degree in Engineering in Computer Science/Information Technology

If you're already part of the Commonwealth Bank Group (including Bankwest, x15ventures), you'll need to apply through Sidekick to submit a valid application. We're keen to support you with the next step in your career.

We're aware of some accessibility issues on this site, particularly for screen reader users. We want to make finding your dream job as easy as possible, so if you require additional support please contact HR Direct on