Security Engineer

Location: Sydney,New South Wales,Australia

Lendi Group is the new group born out of the merger of Aussie Home Loans and Lendi. The business consists of two powerhouse brands that are committed to changing the experience of home lending for all Australians by removing barriers and the unnecessary admin from consumers and brokers alike. 

Lendi Group operates a multi-brand strategy across Aussie Home Loans and Lendi, pulling together a truly personalised home loans experience for the Australian audience that balances both human support and smart technology.  

If you’re passionate about what you do, like working in a fast-paced complex platform transformation environment then this role might be for you!

The Opportunity

This is a broad role that is responsible for the delivery of various aspects of information security operations and services. Aussie is on a journey to mature its information security capability, as we have recently undergone a merge, and must now ensure we deliver the right level of protection for the combined threat landscape.

This role will be a part of building the future state, this includes upgrades to web protection, enhance vulnerability management across all infrastructure and code deployments, ensuring the response capability is enabled for all assets, and much more.

This role will be pivotal in uplifting Aussie’s & Lendi Group’s cybersecurity capability while being able to evidence the achievements already delivered.

This role reports to the Senior Manager, Cybersecurity and Technology Risk and will be the subject matter expert for a range of information security technologies, principles, and best practices. This role will also be responsible for leading the implementation of security controls across a newly merged entity, additionally reviewing the configuration of the tools, investigating incidents, escalating, and reporting on events raised. 

What you'll do

• Provide cybersecurity function support including management of security and technology related risks within Aussie
• Educate and support Technology teams to attain goals and pursue excellence in security capability
• Establish and maintain operational processes for key security technologies, including CSIRT, DLP, SIEM, vulnerability management, endpoint, web, email, and SOAR within Aussie
• Collect and analyse data to deliver meaningful metrics and reporting to align with regulatory requirements and governance frameworks, and other organisational Key Risk Indicators (KRI)
• Work closely with the Aussie & Lendi Group Technology and Risk & Compliance teams
• Provide input to planning and delivery of non-negotiable security controls to all business units and their impact on Aussie processes and systems
• Provide delivery of information security capability, ranging from planning to deployment, and the collaboration with all stakeholders in Lendi Group
• Working with the Technology and Operations Risk teams in Lendi Group to attain a common and consistent measurement of threat and risk
• Work to treat control gaps and remedial actions related to information security incidents ensuring the adoption or development of relevant security services
• Stay current with incident response, digital forensics methodology, the associated legal/regulatory requirements, and threats applicable to Aussie, and participate in the development of these security capabilities
• Identify security controls required for new and existing digital platforms including regulatory requirements
• Support the establishment of new security services in-line with changing threat profiles and organisational context

What you'll bring

• 4yrs years’ experience in information security roles
• Sound technical knowledge of platform and network infrastructure, information security, and technology risk
• Experience in banking, consumer lending or digital banking environments, specifically in Cloud/SaaS environments
• Hands on experience with deploying security controls
• Experience implementing and operating CSIRT, DLP, SIEM, vulnerability management, endpoint, web, email, and SOAR systems, processes, and procedures
• Broad cybersecurity product knowledge and skills, Microsoft product knowledge and skills advantage

Some of our perks & benefits

• Enjoy the flexibility of remote working arrangements: while headquartered in Sydney, we are open to applicants across the Eastern Seaboard. 
• We take career development seriously. We have the opportunities, budget and frameworks in place to propel your career in the direction you want to take it! 
• An additional week’s Loyalty Leave each year after reaching 3 years’ service 
• We offer generous Paid Parental Leave: we celebrate our growing Lendi Group family with 18-26 weeks leave for primary carers and up to 4 weeks for secondary carers 
• Regular social and team building activities. 
• We run wellness initiatives with a strong focus on psychological safety 
• Close-knit, friendly culture with a warm & casual environment. 

To learn more about life at Lendi check out our blog: https://www.lendi.com.au/inspire/category/life-at-lendi/

Lendi Group is proud to be accredited by Project F for commitment to removing systemic barriers for women in technology!

We are an equal opportunity employer that proudly champions flexibility, diversity & inclusion and psychological safety for all staff. 

Apply to this job