Senior Security Specialist

Locations: BNZ Place Auckland, 80 Queen Street; BNZ Place Wellington, 1 Whitmore Street

Time type: Full time

Posted on: Posted 14 Days Ago

Time left to apply: End Date: January 16, 2025 (+ days left to apply)

Job requisition id: JR104432

Worker Type: Permanent

Here at BNZ, it's about more than just banking. We work together in an agile, energising environment to create innovative solutions through our promise "If you can imagine a better future, let's find a way."

We support wellbeing, flexible working and have a generous leave offering. There is the opportunity for growth, learning and career development. No two days are the same.

The Enterprise Data Protection team is accountable to prevent data leakage of private or confidential information (including Highly Confidential) to external parties. We are responsible for the management and operational support of information loss protection practices, the policies and technologies that provide monitoring, reporting and blocking capability for BNZ.

Our protection services cover (but are not limited to) the following Services/Systems:

Web (Internal and External)
Endpoints (USBs and laptops)
Emails
Cloud access (CASB), APIs and Cloud Services
This role can be based in Auckland or Wellington. It is a hybrid role with two days where you can work flexibly.

What are 5 day-to-day tasks the person in this role will complete?

Review, prioritize and respond to security alerts and support tickets, focusing on high-severity incidents and ensuring timely resolution. Escalate complex issues as necessary while mentoring junior team members in handling routine tasks.
Continuously monitor and fine-tune configurations in tools like (and not limited to) Microsoft Purview, Zscaler, and CrowdStrike to maintain optimal performance and ensure comprehensive threat detection and prevention.
Lead investigations into escalated incidents, perform root cause analysis and implement corrective actions to prevent recurrence. Document findings and lessons learned for organisational improvement.
Ensure data governance practices are followed, reviewing data lineage and compliance reports to identify and mitigate potential risks while supporting regulatory and audit requirements.
Communicate daily updates to stakeholders, including progress on incidents, support tickets and tool performance. Collaborate with cross-functional teams to align security operations with broader organisational goals.
What technical skills are REQUIRED for this role?

Proficiency in the use of:

Microsoft Purview
Triaging using the Defender portal
Proficiency in the use of Zscaler
(Only one of the above is required but all three is a bonus!)

What attributes will this person display in order to be successful in this role?

We are looking for someone who has a problem-solving mindset, able to anticipate risks, address challenges creatively and implement forward-looking security solutions. While staying updated on evolving cybersecurity trends, we expect the successful candidate to be effective in communication with stakeholders, mentoring team members and fostering partnerships across diverse teams.

Applications close at 11:5+pm, Wednesday 15 January 2025. The team will not be reviewing applications until after 13 January 2025.

#J-18808-Ljbffr