Cloud Incident Response Manager - AzureCommonwealth Bank of Australia, Sydney, Australia
Your business:The Technology division delivers the Group's information technology and banking operations functions to ensure the highest levels of customer service through world-class process excellence and technology innovation.
Cyber Security protects the bank and our customers from theft, losses and risk events, through effective and proactive management of cyber security, privacy and operational risk.
We support our people with the flexibility to balance where work is done with at least half your time each month connecting in office.
We also have many other flexible working options available including changing start and finish times, part-time arrangements and job share to name a few.
Talk to us about how these arrangements might work for you.
Your new team:Cyber Defence Operations (CDO) helps protect the group from malicious activity by providing a combination of Cyber Defence and Cyber Attack teams.
Incident Response Cloud Security assists with enabling CDO to appropriately defend, detect and respond to cloud cyber security incidents.
The Incident Response Cloud Security Team reviews and performs analysis on incident response engagements involving Azure, assists with uplifting the cloud cyber control hygiene and provides assistance with CDO's incident response process, vulnerability management and penetration testing in the cloud.
Your Impact and Contribution:The Incident Response Cloud and Emerging Security Team, part of the wider Cyber Defence Operations (CDO), works closely with all of the cyber teams, as well as the Cloud Enablement and Engineering (CEE) and Cloud Security Technology team who manage the cloud environments across the Group.
As the Cloud Security Incident Response Manager, you are the subject matter expert leading solutions, services and project initiatives across Azure.
You will act as the technical cloud security SME and escalation path, drawing on your expertise in one or more of the following domains: incident response in Azure environments, cloud security control effectiveness, host analysis, network forensics, malware analysis, threat intelligence, and system administration.
You will also: Manage, mentor, and develop a team of cybersecurity analysts, championing a collaborative and high-performance culture within IR Cloud and Emerging Security.Use cyber security tools to gather information and perform investigations within the Group's public cloud environment.Determine best practice approaches for monitoring, undertaking incident response, and managing cyber control hygiene in the cloud.Document appropriate ways to detect, prevent, and isolate suspicious activity in the cloud.Assist the CDO team with any incident response and remediation activities related to cloud workloads.Review security controls in affected cloud environment(s) to identify gaps and provide input into post incident reporting.Assist the CEE team with ongoing reviews/uplift of the security posture in the public cloud environment.Review cyber controls in affected environment(s) to identify gaps and provide input into defence assessments and posts incident reporting.We are interested in people who:Are an expert in Cloud Incident Response (IR) and or cloud security with a core focus on Azure solutions and services.
You will bring your experience working within a similar role managing large and complex solutions across cloud security and incident response as an Azure subject matter expert (SME).
You are a deep technical cloud security SME with the ability to offer extensive experience across cloud incident response or similar operational cloud security services.
You will bring: Deep technical IR and or cloud security experience across azure essential.Experience in monitoring, undertaking incident response and managing cyber control hygiene in the cloud.Demonstrated experience in incident response is essential.Expertise in Azure cloud security controls.Cloud Security Certifications in Azure Security is desirable.Bachelor's degree in information technology, Cybersecurity, or a related field is preferred.Professional certifications such as CISSP, information security, information technology, risk management or equivalent discipline is desirable.If this role is of interest to you please apply directly or reach out to have a confidential discussion in more detail.
If you're already part of the Commonwealth Bank Group (including Bankwest, x15ventures), you'll need to apply through Sidekick to submit a valid application.
We're keen to support you with the next step in your career.
Advertising End Date: 01/10/2024
#J-18808-Ljbffr
