Cyber Security Architect
Posted Updated
Summary
Designs and reviews security architectures for a retail bank: leads secure-by-design reviews, threat modelling and risk assessments, defines security requirements and guardrails across cloud, apps, identity and APIs, and supports the cyber security strategy. Core tech: Azure/AWS cloud security, DevSecOps (SAST/DAST), NIST/OWASP/Essential Eight.
Where you’ll add value
The Cyber Security Architect will assist with designing and ensuring the implementation of robust security architectures that meet the organisation’s evolving cyber threat landscape, regulatory requirements and internal security policies and standards.
The role will embed secure by design practices, provide pragmatic security advice to delivery teams, and ensure material security risks are identified and addressed throughout the solution lifecycle
The Cyber Security Architect will work closely with business and technology teams, particularly the Architecture team, to embed secure-by-design practices across new and changing solutions. The role will define security requirements, facilitate threat modelling, and establish and verify the security assurance requirements that must be met throughout the solution lifecycle. The role will also support the ongoing development and implementation of the organisation’s Cyber Security Strategy and Implementation Plan.
Working as part of an inclusive and collaborative team, your key responsibilities will include:
What we can offer you
There’s life at work, and life outside of work – and we understand that. That’s why we offer an extensive range of employee benefits.
Are you looking for a career with endless opportunities? There’s more to us than banking. We are a competitive Australian retail bank with customer-centricity at the heart of everything we do.
P&N Group is amongst the largest customer-owned banking organisations in Australia, represented by P&N Bank in Western Australia and BCU Bank in New South Wales and southeast Queensland. Our purpose is to enrich the lives of our customers and their communities.
Our culture is the sum of how we do things – and we believe it’s a real point of difference. Our culture is shaped by each and every one of us and by joining us, you will shape it too. We empower our people, mistakes are seen as an opportunity to learn, and we encourage diverse thinking. We are driven by a shared purpose and come together to build a workplace of trust and belonging for all.
We continue to transform, shape, and develop the products, services, digital tools, and experience we offer our customers of today and tomorrow. To help us achieve our ambitious plans, we’re looking for talented individuals to join our teams across all three states and all areas of our organisation.
What does our recruitment process look like?
The process can include a phone screen, virtual and/or face-to-face interview, psychometric testing, reference checks, and all relevant background checks.
At P&N Group, we are committed to creating an inclusive employee experience and better understanding the needs of our customers. We support this through employee networks, flexible work options, mentoring and initiatives that strengthen inclusion and cultural understanding across the organisation. We welcome and encourage applications from people of all backgrounds, identities, and lived experiences. This includes people who identify as LGBTQIA+, people with disability and/or who are neurodivergent, Aboriginal and/or Torres Strait Islander peoples, and people of all genders, ages and cultural backgrounds.
If you require adjustments or flexibility during the recruitment process, please contact our Talent Acquisition team at recruitment@pnbank.com.au. We’ll work with you to support your participation.
To find out more about what it’s like to work with us, visit https://www.pnbank.com.au/about/careers/, or meet some of our people here https://www.youtube.com/watch?v=ae8tyBGYofI.
The closing date for applications is 17th November 2026.
(Please note that candidate screening and interviews may be completed prior to advertisement closure date.)
The Cyber Security Architect will assist with designing and ensuring the implementation of robust security architectures that meet the organisation’s evolving cyber threat landscape, regulatory requirements and internal security policies and standards.
The role will embed secure by design practices, provide pragmatic security advice to delivery teams, and ensure material security risks are identified and addressed throughout the solution lifecycle
The Cyber Security Architect will work closely with business and technology teams, particularly the Architecture team, to embed secure-by-design practices across new and changing solutions. The role will define security requirements, facilitate threat modelling, and establish and verify the security assurance requirements that must be met throughout the solution lifecycle. The role will also support the ongoing development and implementation of the organisation’s Cyber Security Strategy and Implementation Plan.
Working as part of an inclusive and collaborative team, your key responsibilities will include:
- Lead security architecture and secure-by-design reviews for new and changing technology solutions.
- Define security requirements, architecture principles, patterns and guardrails across applications, cloud, infrastructure, APIs, identity and third-party services.
- Conduct threat modelling and security risk assessments to identify credible threats, control gaps and departures from security standards.
- Recommend proportionate controls and practical remediation options that reflect the solution’s risk, criticality and delivery context.
- Provide architecture assurance throughout the delivery lifecycle, including reviewing security designs, testing strategies and relevant assurance evidence.
- Assess third-party and externally hosted solutions to identify security dependencies, integration risks and required controls.
- Document architecture decisions, security risks, exceptions and control requirements, escalating unresolved material risks through the appropriate governance processes.
- Contribute to information security policies, standards and architecture frameworks, and communicate security risks and decisions clearly to technical teams, project leaders, risk stakeholders and senior management.
- Demonstrated experience in cyber security architecture or a comparable senior technical security role.
- Strong security architecture knowledge across applications, cloud services, infrastructure, networks, identity, data and APIs. Practical knowledge of cloud security across IaaS, PaaS and SaaS environments, ideally including Microsoft Azure, AWS or multi-cloud environments.
- Experience conducting secure-by-design reviews, threat modelling and security risk assessments for complex technology solutions. Ability to translate business, regulatory and policy requirements into clear and proportionate technical security requirements and controls.
- Understanding of contemporary application security and DevSecOps practices, including secure coding, SAST, DAST, software composition analysis, vulnerability management and penetration testing.
- Experience applying recognised practices and frameworks such as NIST, OWASP, MITRE ATT&CK, CIS Controls or the Essential Eight.
- Strong written and verbal communication skills, including the ability to explain complex security issues, constructively challenge proposed designs and influence stakeholders.
- Sound judgement and the ability to balance security, customer, operational and delivery considerations.
- Experience in banking, financial services or another regulated environment, and familiarity with APRA CPS 234, NIST CSF, PCI DSS, ISO 27001 and Australian privacy requirements, would be advantageous.
- Degree or diploma in Cyber Security, Information Systems or relevant field or equivalent experience desirable
- Relevant certifications such as CISSP, CISSP-ISSAP, SABSA, TOGAF or recognised cloud security qualifications are desirable.
What we can offer you
There’s life at work, and life outside of work – and we understand that. That’s why we offer an extensive range of employee benefits.
- Enjoy flexible work arrangements.
- Be supported with leadership and professional development, such as education assistance, mentoring, and emerging leadership programs.
- Generous discounts on home loans, personal loans, insurance and other banking products and services.
- An incentive scheme for exceptional performance, up to two weeks’ additional purchased leave per year, and novated lease program.
- 12 weeks paid parental leave for the primary care giver, and three weeks for the non-primary care giver.
- Two days’ paid volunteer leave each year to use with a community partner of your choice.
- Employee social clubs in our Perth and Coffs Harbour corporate offices.
Are you looking for a career with endless opportunities? There’s more to us than banking. We are a competitive Australian retail bank with customer-centricity at the heart of everything we do.
P&N Group is amongst the largest customer-owned banking organisations in Australia, represented by P&N Bank in Western Australia and BCU Bank in New South Wales and southeast Queensland. Our purpose is to enrich the lives of our customers and their communities.
Our culture is the sum of how we do things – and we believe it’s a real point of difference. Our culture is shaped by each and every one of us and by joining us, you will shape it too. We empower our people, mistakes are seen as an opportunity to learn, and we encourage diverse thinking. We are driven by a shared purpose and come together to build a workplace of trust and belonging for all.
We continue to transform, shape, and develop the products, services, digital tools, and experience we offer our customers of today and tomorrow. To help us achieve our ambitious plans, we’re looking for talented individuals to join our teams across all three states and all areas of our organisation.
What does our recruitment process look like?
The process can include a phone screen, virtual and/or face-to-face interview, psychometric testing, reference checks, and all relevant background checks.
At P&N Group, we are committed to creating an inclusive employee experience and better understanding the needs of our customers. We support this through employee networks, flexible work options, mentoring and initiatives that strengthen inclusion and cultural understanding across the organisation. We welcome and encourage applications from people of all backgrounds, identities, and lived experiences. This includes people who identify as LGBTQIA+, people with disability and/or who are neurodivergent, Aboriginal and/or Torres Strait Islander peoples, and people of all genders, ages and cultural backgrounds.
If you require adjustments or flexibility during the recruitment process, please contact our Talent Acquisition team at recruitment@pnbank.com.au. We’ll work with you to support your participation.
To find out more about what it’s like to work with us, visit https://www.pnbank.com.au/about/careers/, or meet some of our people here https://www.youtube.com/watch?v=ae8tyBGYofI.
The closing date for applications is 17th November 2026.
(Please note that candidate screening and interviews may be completed prior to advertisement closure date.)