Job Description

Security Incident Response Manager

• You are an excellent communicator and problem solver with a background in IT, cyber security, and incident response management.
• We are innovative and are becoming a leading Group Security team in Australia.
• Together we can contribute to protecting the Group, our Customers and the Community

Your business:

The Technology division delivers the Group’s information technology and banking operations functions to ensure the highest levels of customer service through world-class process excellence and technology innovation. Cyber Security protects the bank and our customers from theft, losses and risk events, through effective and proactive management of cyber security, privacy and operational risk.

We support our people with the flexibility to balance where work is done with at least half your time each month connecting in office. We also have many other flexible working options available including changing start and finish times, part-time arrangements and job share to name a few. Talk to us about how these arrangements might work for you.

We are seeking a dedicated and experienced Cyber Incident Manager to join our team. As the Manager, Security Incident Response Operations you will be reporting directly to the Senior Manager. This position will play a key role in developing and delivering the teams' services which aim to improve awareness, identification, and response to cyber security related incidents and security events of interest.

You will work closely with key technical stakeholders, leaders and business units to improve the Group Security teams' effectiveness and performance.

Key Responsibilities:

• Incident Management: Lead and manage the response to Cyber Security and Cyber related IT Service incidents, ensuring timely and effective resolution.
• Capability Building: Develop and implement new capabilities to enhance our incident response processes and tools.
• Communication: Serve as a primary point of contact for incident response, effectively communicating with internal and external stakeholders, both technical and non-technical. Maintain detailed records of incidents, response actions, and outcomes.
• Coordination: Work collaboratively with various teams, including IT, security, and business units, to ensure a coordinated response to incidents.
• Continuous Improvement: Participate in post incident reviews, facilitate tabletop exercises, provide training and guidance to stakeholders, and manage a variety of projects and initiatives to ensure the use of best practices and procedures.
• 24/7 on-call roster: Be available to work within a 24/7 on-call rotational roster, to enable the team to provide continuous incident response support (currently occasional only). An additional allowance is paid for the on-call period.

We want to hear from people who have the following:

• Highly experienced in incident response, specifically in Cyber Security Incidents and/or IT Service Management Incident Response.
• Proven ability to build new capabilities and improve existing processes.
• Excellent verbal and written communication skills, with the ability to convey complex information clearly and concisely.
• Strong interpersonal skills and the ability to work effectively with diverse stakeholders and business leaders.
• Solid understanding of security technologies and frameworks (e.g. NIST), threat landscapes, and incident response methodologies.
• Relevant certifications, for example CISSP, CISM, would be highly regarded.

Why Join Us?

• Impact: Play a crucial role in protecting our organization, customers and the community from expanding cyber threats.
• Growth: Diverse opportunities for professional development career progression.
• Team: We are a dynamic and supportive team who are committed to excellence in security, and continuously uplifting our offering, and the value we provide.
• If you are passionate about cyber security and have the experience and skills we are looking for, we encourage you to apply and become a part of our dedicated team.

Advertising End Date: 01/07/2026