Sydney, New South Wales, Australia
Onsite
Control Lead, Data Loss Prevention
Protect sensitive information by strengthening controls that detect, prevent and respond to data leakage and loss.
Lead control outcomes across End User Data Loss Prevention, supporting alerting, blocking, investigation, escalation and reporting.
Contribute to Group Security’s purpose of safeguarding a brighter future for all by securing the bank and protecting customers.
Do work that matters:
As a Control Lead, Data Loss Prevention, you’ll play an important role in helping CommBank protect sensitive information from leakage or loss through end-user electronic data transfers to external destinations.
You’ll support the effective operation, uplift and oversight of Data Loss Prevention controls, helping ensure events are inspected, reviewed, investigated and resolved in line with Group policies, standards and guidelines.
This includes supporting baseline inspection rules, alert and blocking processes, triage and response processes, escalation pathways, exemptions, governance, metrics and reporting.
This is a meaningful opportunity to work across security, risk, technology and business teams to strengthen how sensitive information is protected across the Group.
See yourself in our team:
Group Security is part of Technology and brings together capabilities across Group Security Office, Group Cyber Security, Protective Security and Business Resilience, Group Fraud Technology, Group Fraud Management Services and Cyber Defence Operations.
You’ll be part of a team focused on managing cyber risk today while investing for the future through intelligent governance, protection, detection, response, recovery and resilience.
In this role, you will:
Lead and support the effective operation of End User Data Loss Prevention controls that detect or prevent sensitive information leaving the Group.
Support baseline inspection rules used to identify sensitive information and help ensure rule sets remain effective for alerting and blocking.
Oversee control processes for onboarding, reviewing, uplifting and offboarding inspection rules.
Support the triage, investigation, closure, supervision and escalation of Data Loss Prevention alerts, including timely resolution pathways.
Work with Group Security and Business Unit responders to ensure alerts are assigned, investigated, resolved and escalated where required.
Contribute to governance, metrics and reporting that measure control performance, identify out-of-tolerance outcomes and support remedial action.
Support processes that identify and restrict end-user initiated data transfers to SaaS services, where required.
Help maintain exemption processes for users excluded from control monitoring, including approved timeframes and appropriate records.
We’re interested in hearing from people who have:
Experience in cyber security, technology risk, technology controls, information security, data protection or a related discipline.
Practical experience with Data Loss Prevention controls, including monitoring, alerting, blocking, triage, investigation or control improvement.
Demonstrated leadership experience and ability to lead a team of 3 Analysts.
Strong understanding of sensitive information handling, data leakage risk and security control environments.
Experience working with policies, standards, control requirements, governance, metrics or reporting.
Confidence partnering with business, technology, risk and security stakeholders to drive clear control outcomes.
An ability to translate control requirements into practical processes that are sustainable and easy to operate.
A collaborative, curious and outcome-focused approach to protecting customers, colleagues and the organisation.
Working with us:
At CommBank, we're committed to creating an accessible, inclusive and respectful workplace. If you require support or adjustments, please let us know. We welcome applications from people of all backgrounds and we're particularly committed to making a positive difference for Aboriginal and/or Torres Strait Islander Peoples. For support please contact 1800 989 696.
If this sounds like the right next step for you, apply now. We’d love to hear from you.
If you're already part of the Commonwealth Bank Group (including Bankwest, x15ventures), you'll need to apply through Sidekick to submit a valid application. We’re keen to support you with the next step in your career.
We're aware of some accessibility issues on this site, particularly for screen reader users. We want to make finding your dream job as easy as possible, so if you require additional support please contact HR Direct on 1800 989 696.
Want to know if this job is worth applying to?
