Security Incident Response Analyst

As a Security Incident Response Analyst at CommBank, your primary responsibility is to protect the bank and customers from theft, loss, and risk events by effectively managing cyber security incidents, threats, privacy, and operational risks. You will be performing cyber security incident management activities to identify, investigate, and resolve incidents as part of the Cyber Defence Operations function. Additionally, you will monitor and analyze key intelligence points to ensure timely management of bank-related incidents. Your role also involves analyzing and preparing reports on incident activities for team members, stakeholders, and leadership. - Act as a subject matter expert and key point of contact, providing advice on controls, processes, and initiatives within your areas of responsibility - Collaborate with business, risk management, and compliance stakeholders to ensure compliance with Group Policies, risk standards, and obligations - Work on improving current processes and tools to enhance the efficiency and productivity of the team's technical capabilities - Define policies, guidelines, and standards and assist in the scoping and implementation of new processes and technology for identifying, detecting, and responding to security events - Continually research banking cyber security threats, including malware, phishing, botnets, and other threat actor techniques and tactics - Adhere to the Code of Conduct and promote a risk and control culture across business stakeholders Qualifications Required: - At least 3 years of experience in Cyber Security incident response within the financial services industry or a security consulting firm - Risk mindset, demonstrated willingness to engage in self-learning or security research outside of standard business hours, and ability to articulate intelligence clearly - Strong communication, engagement, and stakeholder management skills - Ability to consult with business and technical representatives to balance security and business requirements - Growth mindset, curiosity to explore complex problems, critical thinking skills, and experience in driving productivity improvements - Bachelor's or Master's degree in Engineering in Computer Science/Information Technology,