About Us

At ANZ, we're shaping a world where people and communities thrive, driven by a common goal: to improve the financial wellbeing and sustainability of our millions of customers.

About the Role

The Security Partner supports ANZ’s cyber security objectives by working with delivery teams to ensure security is considered and applied across the lifecycle of technology solutions.

In this role, you will act as a Security Advisor aligned to delivery and solution design, working closely with engineers, architects, and project teams to ensure technology solutions are designed with appropriate security controls and a clear understanding of information security risk.

You will combine technical expertise with practical advisory capability, supporting initiatives from early design through to delivery by identifying exposures and advising teams on secure, pragmatic solutions.

Banking is changing and we’re changing with it, giving our people great opportunities to try new things, learn and grow. Whatever your role at ANZ, you’ll be building your future, while helping to build ours.

What will your day look like?

In this role you will have the opportunity to:

• Partner with delivery teams to design secure solutions and improve security outcomes across delivery
• Conduct security design reviews, identifying control gaps, weaknesses, and exposure points in solution architectures
• Develop and maintain security design documentation, clearly outlining information flow, control placement, and associated risks
• Facilitate or contribute to threat modelling activities, identifying realistic attack scenarios and evaluating design weaknesses
• Interpret outputs from security testing activities and translate findings into clear design implications and risk impact
• Advise teams on how to address identified risks, balancing security requirements with delivery objectives
• Review vendor contracts and embedding relevant Cyber Security clauses, including APRA CPS 234 requirements

What will you bring?

To grow and be successful in this role, you will ideally bring the following:

• Good understanding of Security Architecture principles, with the ability to design, develop, evaluate and review secure solutions in an agile environment, facilitating scalability, extensibility and reusability
• Cloud security experience in AWS and/or GCP, including work in complex hybrid-cloud environments, cloud migrations, exposure assessments, and the development of strategic cloud architecture patterns.
• Familiarity with threat modelling methodologies, including an understanding of common tactics, techniques, and procedures (TTPs) applied to modern application, infrastructure, and cloud-based environments
• Strong communication skills, with the ability to explain security risks and recommendations clearly to technical and non-technical stakeholders
• Ability to engage with engineers and delivery teams and provide pragmatic, actionable guidance

You’re not expected to have 100% of these skills. At ANZ a growth mindset is at the heart of our culture, so if you have most of these things in your toolbox, we’d love to hear from you.

So why join us?

From the moment you join ANZ, you'll be doing meaningful work that will shape a world where people and communities thrive.

But it's not just our customers who'll feel your impact. You'll feel it too. Because at ANZ, you'll have the resources, opportunities, and support you need to take the next big step in your career.

We're a diverse bunch at ANZ in different roles, different locations, doing different things. That's why we have a range of flexible working arrangements, so our people can 'make work, work for them'. We also provide a range of benefits including access to health and wellbeing services and discounts on selected products and services from ANZ and more.

At ANZ, you'll be part of an organisation where the different backgrounds, perspectives and life experiences of our people are celebrated. That's because we're committed to building a workplace that reflects the diversity of the communities we serve. We welcome applications from everyone and encourage you to talk to us about any adjustments you may require to our recruitment process or the role itself. If you're a candidate with a disability or access requirement, and have an enquiry about the support provided, please let us know on your application or visit ANZ Accessibility and Inclusion Programs for alternate contact methods.

• Partner with delivery teams to design secure solutions and improve security outcomes across delivery
• Conduct security design reviews, identifying control gaps, weaknesses, and exposure points in solution architectures
• Develop and maintain security design documentation, clearly outlining information flow, control placement, and associated risks
• Facilitate or contribute to threat modelling activities, identifying realistic attack scenarios and evaluating design weaknesses
• Interpret outputs from security testing activities and translate findings into clear design implications and risk impact
• Advise teams on how to address identified risks, balancing security requirements with delivery objectives
• Review vendor contracts and embedding relevant Cyber Security clauses, including APRA CPS 234 requirements

• Good understanding of Security Architecture principles, with the ability to design, develop, evaluate and review secure solutions in an agile environment, facilitating scalability, extensibility and reusability
• Cloud security experience in AWS and/or GCP, including work in complex hybrid-cloud environments, cloud migrations, exposure assessments, and the development of strategic cloud architecture patterns.
• Familiarity with threat modelling methodologies, including an understanding of common tactics, techniques, and procedures (TTPs) applied to modern application, infrastructure, and cloud-based environments
• Strong communication skills, with the ability to explain security risks and recommendations clearly to technical and non-technical stakeholders
• Ability to engage with engineers and delivery teams and provide pragmatic, actionable guidance

• Good understanding of Security Architecture principles
• Cloud security experience in AWS and/or GCP
• Familiarity with threat modelling methodologies
• Strong communication skills
• Ability to engage with engineers and delivery teams