Lead Security Consultant

Role Overview

• Develop and maintain clear processes for program engagement with Security Advisors throughout all project stages and deliverables.
• Continuously refine engagement methods and adapt to evolving program delivery models, ensuring enhanced visibility and transparency across the program.
• Ensure consistent understanding and implementation of security obligations as outlined in the ANZ Delivery framework, and support the program in demonstrating compliance.
• Collaborate with program teams to design and maintain an efficient Security Assurance workplan, enabling successful delivery and evidence of security controls.
• Facilitate the practical application of ANZ’s Security policies and standards, including clear articulation of policy departures and identification of security gaps.
• Review and adjust security engagement approaches at each program stage to support continuous improvement and operational excellence.
• Serve as the escalation point for the program regarding any issues or blockers related to the execution of the security workplan.
• Serve as the primary and visible point of contact for Program stakeholders on security matters, connecting them to relevant experts and resources within the NZ division or broader group as needed.
• Stay across emerging threats and trends, translating insights into practical guidance and sharing knowledge with technology and business teams.
• Balance compliance and innovation, helping the organisation meet regulatory and contractual obligations while maintaining a strong, adaptable risk posture.
• Contribute to a collaborative, high-performing team culture, supporting peers, mentoring others, and continuously improving how security is delivered across the business.

Requirements

• A strong foundation in Information Technology and Architecture, with practical knowledge of networks, mobile applications, device security, and virtualised environments.
• Proven experience in operating within a complex program with multiple stakeholders as the Security Lead representing the Security area.
• Proven experience in security consulting, supporting change initiatives by embedding security into transformation from the outset.
• Sound understanding of cybersecurity principles and assurance practices, including alignment with standards, policies, and frameworks such as ISO27001/02, SOC, and NIST.
• Familiarity with security tools and technologies, including firewalls, IPS/IDS, WAF, and SIEM, applied across diverse environments.
• Knowledge of regulatory and compliance requirements, such as Sarbanes-Oxley, PCI DSS, RBNZ/BS11, and APRA, with the ability to balance these with business needs.
• Experience in program and project delivery as well as risk management, including threat modelling, maintaining risk registers, and presenting mitigation strategies to senior stakeholders.
• Excellent communication and relationship-building skills, with the ability to translate technical risks into accessible language and influence at all levels.

Tech Stack

• Cyber Security
• Firewalls

Benefits

• access to wellbeing services
• discounts on selected products and services from ANZ
• flexible working arrangements