Cyber Security Architect

BCU Bank; Brisbane; Vor Ort; AUD 180.000 - 240.000; Vollzeit

Benefits dieser Stelle

Flexible work arrangements

Education assistance and mentoring

Banking product discounts and services

Incentive scheme and extra leave

Zusammenfassung

P&N Group is seeking a Cyber Security Architect to design robust security architectures and embed secure-by-design practices across new and changing solutions. You will work with business and technology teams, defining security requirements, facilitating threat modelling, and ensuring security assurance throughout the solution lifecycle.

The role involves collaborating with architecture teams, applying standards such as NIST/OWASP, and contributing to the Cyber Security Strategy.

Qualifikationen

• Demonstrated experience in cyber security architecture or a comparable senior technical security role.
• Strong knowledge across applications, cloud, infrastructure, networks, identity, data and APIs.
• Ability to translate business and regulatory requirements into clear technical security controls.
• Familiarity with DevSecOps and secure coding practices.

Aufgaben

• Lead security architecture reviews for new and changing technology solutions.
• Define security requirements, principles, patterns and guardrails across applications, cloud, infrastructure, APIs and identity.
• Conduct threat modelling and risk assessments to identify threats and gaps.
• Recommend proportionate controls and remediation options based on risk and delivery context.
• Provide architecture assurance throughout the delivery lifecycle and review security designs and testing strategies.
• Assess third‑party and externally hosted solutions for security dependencies and controls.
• Document architecture decisions, risks and requirements with governance escalation.
• Contribute to information security policies and communicate risks to teams and senior management.

Kenntnisse

Cyber security architecture

Cloud security

Threat modelling

Security risk assessments

Secure-by-design

DevSecOps

NIST

OWASP

MITRE ATT&CK

CIS Controls

Essential Eight

Regulatory knowledge

Communication skills

Ausbildung

Degree or diploma in Cyber Security / Information Systems or relevant field

CISSP / CISSP-ISSAP / SABSA / TOGAF or equivalent certifications

Tools

Azure

AWS

Multi-cloud environments

Jobbeschreibung

Where you'll add value

The Cyber Security Architect will assist with designing and ensuring the implementation of robust security architectures that meet the organisation’s evolving cyber threat landscape, regulatory requirements and internal security policies and standards.

The role will embed secure by design practices, provide pragmatic security advice to delivery teams, and ensure material security risks are identified and addressed throughout the solution lifecycle.

The Cyber Security Architect will work closely with business and technology teams, particularly the Architecture team, to embed secure-by-design practices across new and changing solutions. The role will define security requirements, facilitate threat modelling, and establish and verify the security assurance requirements that must be met throughout the solution lifecycle. The role will also support the ongoing development and implementation of the organisation’s Cyber Security Strategy and Implementation Plan.

Working as part of an inclusive and collaborative team, your key responsibilities will include:

• Lead security architecture and secure-by-design reviews for new and changing technology solutions.
• Define security requirements, architecture principles, patterns and guardrails across applications, cloud, infrastructure, APIs, identity and third‑party services.
• Conduct threat modelling and security risk assessments to identify credible threats, control gaps and departures from security standards.
• Recommend proportionate controls and practical remediation options that reflect the solution’s risk, criticality and delivery context.
• Provide architecture assurance throughout the delivery lifecycle, including reviewing security designs, testing strategies and relevant assurance evidence.
• Assess third‑party and externally hosted solutions to identify security dependencies, integration risks and required controls.
• Document architecture decisions, security risks, exceptions and control requirements, escalating unresolved material risks through the appropriate governance processes.
• Contribute to information security policies, standards and architecture frameworks, and communicate security risks and decisions clearly to technical teams, project leaders, risk stakeholders and senior management.

What sets you up for success

• Demonstrated experience in cyber security architecture or a comparable senior technical security role.
• Strong security architecture knowledge across applications, cloud services, infrastructure, networks, identity, data and APIs. Practical knowledge of cloud security across IaaS, PaaS and SaaS environments, ideally including Microsoft Azure, AWS or multi‑cloud environments.
• Experience conducting secure-by-design reviews, threat modelling and security risk assessments for complex technology solutions. Ability to translate business, regulatory and policy requirements into clear and proportionate technical security requirements and controls.
• Understanding of contemporary application security and DevSecOps practices, including secure coding, SAST, DAST, software composition analysis, vulnerability management and penetration testing.
• Experience applying recognised practices and frameworks such as NIST, OWASP, MITRE ATT&CK, CIS Controls or the Essential Eight.
• Strong written and verbal communication skills, including the ability to explain complex security issues, constructively challenge proposed designs and influence stakeholders.
• Sound judgement and the ability to balance security, customer, operational and delivery considerations.
• Experience in banking, financial services or another regulated environment, and familiarity with APRA CPS 234, NIST CSF, PCI DSS, ISO 27001 and Australian privacy requirements, would be advantageous.
• Degree or diploma in Cyber Security, Information Systems or relevant field or equivalent experience desirable.
• Relevant certifications such as CISSP, CISSP-ISSAP, SABSA, TOGAF or recognised cloud security qualifications are desirable.

What we can offer you

There's life at work, and life outside of work, and we understand that. That's why we offer an extensive range of employee benefits.

• Enjoy flexible work arrangements.
• Be supported with leadership and professional development, such as education assistance, mentoring, and emerging leadership programs.
• Generous discounts on home loans, personal loans, insurance and other banking products and services.
• An incentive scheme for exceptional performance, up to two weeks’ additional purchased leave per year, and novated lease program.
• 12 weeks paid parental leave for the primary care giver, and three weeks for the non-primary care giver.
• Two days’ paid volunteer leave each year to use with a community partner of your choice.
• Employee social clubs in our Perth and Coffs Harbour corporate offices.

About us

Are you looking for a career with endless opportunities? There's more to us than banking. We are a competitive Australian retail bank with customer‑centricity at the heart of everything we do.

P&N Group is amongst the largest customer‑owned banking organisations in Australia, represented by P&N Bank in Western Australia and BCU Bank in New South Wales and southeast Queensland. Our purpose is to enrich the lives of our customers and their communities.

Our culture is the sum of how we do things – and we believe it’s a real point of difference. Our culture is shaped by each and every one of us and by joining us, you will shape it too. We empowerour people, mistakes are seen as an opportunity to learn, and we encourage diverse thinking. We are driven by a shared purpose and come together to build a workplace of trust and belonging for all.

We continue to transform, shape, and develop the products, services, digital tools, and experience we offer our customers of today and tomorrow. To help us achieve our ambitious plans, we’re looking for talented individuals to join our teams across all three states and all areas of our organisation.

What does our recruitment process look like?

The process can include a phone screen, virtual and/or face‑to‑face interview, psychometric testing, reference checks, and all relevant background checks.

At P&N Group, we are committed to creating an inclusive employee experience and better understanding the needs of our customers. We support this through employee networks, flexible work options, mentoring and initiatives that strengthen inclusion and cultural understanding across the organisation. We welcome and encourage applications from people of all backgrounds, identities, and lived experiences. This includes people who identify as LGBTQIA+, people with disability and/or who are neurodivergent, Aboriginal and/or Torres Strait Islander peoples, and people of all genders, ages and cultural backgrounds.

If you require adjustments or flexibility during the recruitment process, please contact our Talent Acquisition team at ***********@pnbank.com.au. We'll work with you to support your participation.

To find out more about what it’s like to work with us, visit https://www.pnbank.com.au/about/careers/, or meet some of our people here https://www.youtube.com/watch?v=ae8tyBGYofI.

The closing date for applications is 17th November 2026. (Please note that candidate screening and interviews may be completed prior to advertisement closure date.)