Third Party Security Manager

The Banking & Financial Services (BFS) Security and Fraud team defends Macquarie’s retail banking and financial services business. The team ensures the confidentiality, integrity and availability of The Banking & Financial Services’ systems and information.

Join our Information Security Office as a Third Party Security Manager where you will be driving the identification, management and mitigation of information security risks associated with partner providers (suppliers, vendors etc.) and to carry out necessary security risk.

Your responsibilities include:

• Work collaboratively with Banking & Financial Services business and technology stakeholders to identify new and emerging threats facing the business, analyse the potential risk exposure and identify any potential gaps within our partner ecosystem
• Undertake detailed information security reviews of existing partners, including reviewing vendor supplied independent assurances (e.g. SOC 2 Type 2, ISO27001 certifications)
• Support the development and implementation of pragmatic risk mitigations to minimize residual security risks associated with third parties
• Act as a Subject Matter Expert to our partners and internal Banking & Financial Services stakeholders on security risks
• Be the representative for security when dealing with third party incidents
• Effectively communicate security concepts to technical and non-technical stakeholders
• Develop and maintain strong relationships with partners and internal Macquarie stakeholders
• Keeping up to date with industry trends on cybersecurity as well as the ability to interpret and understand regulations relevant to third parties and the impact it will have on our internal processes

Beneficial experience that you will bring:

• 3+ years of experience within the cybersecurity domain
• Working in large organisations and understanding the complexities of financial services
• Experience with financial services regulation e.g. APRA CPS234
• Excellent stakeholder management experience
• Understanding of third party security incident management
• Agility and a “Have a go” attitude to adapt and change in response to internal and external factors affecting our threat landscape and mitigation strategies.
• A professional qualification in Cybersecurity will be considered favourably

To start your journey with Macquarie, please apply via the following link.

About the Corporate Operations Group

The Corporate Operations Group brings together specialist support services in Digital Transformation & Data, Technology, Operations, Human Resources, Business Services, Corporate Strategy & Solutions, and the Macquarie Group Foundation. We deliver service excellence to ensure Macquarie is open for business, deliver on transformational change, invest in our people and have deep relationships with our customers.

Our commitment to Diversity, Equity and Inclusion 

The diversity of our people is one of our greatest strengths. An inclusive and equitable environment enables us to deliver innovative and sustainable outcomes for our people, clients, shareholders and communities. From day one, you’ll be encouraged to be yourself and supported to perform at your best. If our purpose of ‘empowering people to innovate and invest for a better future’ is as inspiring to you as it is to us, please apply. With the right technology, support and resources, our people can work in a range of flexible ways.

We are committed to providing a working environment that embraces and values diversity, equity and inclusion. We encourage candidates to speak with a member of our recruitment team if you require adjustments to our recruitment process to support you, and the type of working arrangements that would help you thrive.