Impress employers and recruiters.
Choose from hundreds of resume examples.

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

Play a key role in maturing secure configuration management capabilities, partnering with engineering, platform, technology, and cyber security teams to strengthen security controls, improve configuration compliance, and reduce cyber risk. Help maintain and evolve secure configuration standards, drive remediation outcomes, and provide expertise across security posture technologies.

Responsibilities

• Maintain and continuously improve the Secure Configuration Management Standard, ensuring alignment with organisational security policies, regulatory obligations and industry best practice.
• Assess and monitor secure configuration controls, identifying opportunities to strengthen control effectiveness and support remediation activities.
• Provide subject matter expertise across security posture management technologies, supporting configuration governance across servers, workstations, APIs, SaaS platforms, containers and cloud environments.
• Drive risk reduction initiatives by identifying configuration-related security exposures, assessing impact and partnering with stakeholders to prioritise remediation activities.
• Develop and maintain reporting, metrics and insights that provide visibility of configuration compliance, control health and security posture.
• Partner with technology, engineering, platform and cyber security teams to promote secure-by-default configuration practices and improve security outcomes.
• Build and maintain strong stakeholder relationships across technology, risk, audit and business teams.
• Support assurance, audit and regulatory activities through evidence gathering, control validation and continuous improvement initiatives.

Requirements

• Experience in cyber security, secure configuration management, vulnerability management or a related security discipline.
• Experience with security scanning, posture management or exposure management technologies such as Qualys, Wiz, Obsidian, NoName, or similar platforms.
• Strong knowledge of cloud, SaaS, API, infrastructure or container technologies and the application of security controls within these environments.
• Demonstrated success influencing stakeholders and driving remediation outcomes across complex technology environments.
• Understanding of security controls, governance frameworks, risk management and assurance practices.
• Ability to analyse security findings, assess risk and translate technical issues into practical remediation actions.
• Experience using workflow and ticketing platforms such as ServiceNow.
• Strong communication, stakeholder engagement and relationship management capabilities.

Skills

• Secure Configuration Management
• Vulnerability Management
• Security Posture Management
• Cloud Security
• SaaS Security
• API Security
• Infrastructure Security
• Container Security
• Risk Management
• Governance Frameworks
• Assurance Practices
• ServiceNow

Experience Level

• Senior

About the Company

• Group Security is part of Technology and brings together security and resilience capabilities spanning cyber security, protective security and business resilience, fraud technology and operations, and cyber defence.
• Within Group Security Technology, you'll join a team focused on secure configuration management, vulnerability management and security engineering outcomes.
• Working across a complex technology landscape, you'll collaborate with stakeholders to uplift security posture, strengthen governance practices and reduce cyber risk at scale.

Equal Opportunity

• At CommBank, we're committed to creating an accessible, inclusive and respectful workplace.
• We welcome applications from people of all backgrounds and we're particularly committed to making a positive difference for Aboriginal and/or Torres Strait Islander Peoples.