Control Manager – Data Security

• Drive enterprise-wide risk conversations and influence how data security is managed across the organisation

• Work closely with senior stakeholders to uplift control effectiveness and remediation outcomes

• Join a high-impact cyber team solving complex, emerging data security challenges

See yourself in our team:

Group Security brings together security and resilience capabilities spanning cyber security, protective security, fraud technology and cyber defence. The team’s purpose is safeguarding a brighter future for all—securing the bank, protecting customers, and delivering best-in-class security outcomes across governance, protection, detection, response and recovery.

Within this, the Cyber Controls Chapter Area plays a critical role in designing, implementing and uplifting cyber control capabilities to continuously improve the Group’s risk profile.

This role sits in the Data Security crew and focuses on unstructured data and Data Security Posture Management (DSPM), a growing priority across the organisation.

Do work that matters:

As a Control Manager – Data Security, you will play a key role in establishing and evolving a new control capability focused on identifying and managing risks across unstructured data environments.

Working closely with Control Leads and senior stakeholders, you will:

• Partner with business and technology stakeholders to identify, assess and articulate data security risks across unstructured data repositories

• Translate complex findings from cyber tooling into clear risk insights and actionable remediation plans

• Drive stakeholder engagement and accountability to ensure effective risk ownership and remediation outcomes

• Develop and uplift policies, standards and guidance to support a newly established control capability

• Analyse outputs from data security scanning tools to identify patterns, themes and emerging risks

• Collaborate with technical squads to ensure control capabilities are effectively operationalised

• Support the operationalisation of the unstructured data control, including developing guidance for the business and maintaining the effectiveness of the control

We’re interested in hearing from people who:

• Bring strong risk, controls or governance experience and are confident navigating ambiguity in complex environments

• Are comfortable engaging and influencing senior stakeholders in high-impact, enterprise-wide discussions

• Have experience in risk management, controls, compliance or governance within cyber or technology domains

• Can translate technical findings into meaningful business risk insights and recommendations

• Thrive in ambiguous environments where controls, policies and approaches are still being defined

• Are proactive, curious and able to challenge thinking to drive better risk outcomes

Technical skills that will benefit you in the role:

• Exposure to cyber security or data security concepts (e.g. data classification, data protection, unstructured data risks)

• Experience working with cyber or data security tools (e.g. DSPM, data discovery, scanning or monitoring tools)

• Familiarity with risk and control frameworks and regulatory expectations

• Experience analysing large datasets or control outputs to identify risk trends and insights

• Relevant certifications (e.g. CISSP, CISM, CRISC) will be advantageous

Working with us

Whether you’re passionate about customer service, driven by data, or called by creativity, a career with us is for you. We support our people with the flexibility to balance where work is done with at least half their time connecting in office. We also have many other flexible working options available including changing start and finish times, part-time arrangements and job share to name a few.

Our people bring their diverse backgrounds and unique perspectives to build a respectful, inclusive, and flexible workplace with flexible work locations. We’re looking for people who truly live our values: Care, Courage and Commitment and we’ll offer you great opportunities to develop your career with us.