Information Security Consultant (Policy-as-Code & Governance Engineering)

Job Description

Create your best future and join as an Information Security Consultant (Policy-as-Code & Governance Engineering)

• Location: Sydney-based role only
• On-site Requirement: 2days per week in the office

What’s the role?

As an Information Security Consultant, you will help drive Westpac’s transition from traditional policy management to a modern Policy-as-Code and governance engineering capability. You will maintain and enhance cybersecurity policies, standards and control frameworks, ensuring alignment with regulatory obligations and industry standards while translating policy requirements into machine-readable, testable and enforceable controls.

Additionally, you'll work closely with architecture, engineering, risk and business teams to embed cybersecurity requirements into technology solutions and delivery practices. You will support Secure by Design, architecture and engineering initiatives, [ND1] manage security exceptions and remediation activities, and maintain traceability across obligations, controls, exceptions and assurance outcomes to strengthen governance and risk management.

You will monitor control effectiveness, compliance and exception trends to drive continuous improvement and reduce risk across the organisation. You will also contribute to audits, assurance and regulatory activities through evidence-based assessments, while leveraging automation and AI to enhance governance processes, policy lifecycle management and compliance outcomes.

What do I need?

• Cybersecurity governance, risk and compliance experience within technology environments, with the ability to translate regulatory, policy and security requirements into practical, testable controls.
• Hands-on experience with GitHub or Bitbucket for version control, collaboration and governance workflows.
• Understanding of Policy-as-Code, governance engineering, control automation and compliance monitoring concepts.
• Some experience using Python or similar scripting languages to streamline workflows and support governance reporting.
• Experience with ServiceNow IRM/GRC, UCF and control mapping frameworks to support governance, risk and compliance activities.
• Knowledge of OSCAL fundamentals, JSON/YAML and machine-readable governance concepts.
• Exposure to CI/CD practices, OPA/Rego, Palantir, AI governance and emerging governance automation technologies.

Note: The internal job title for this position is Information Security Consultant.

Why join us?

We’re obsessed with becoming our customers #1 banking partner for life and we’re looking for people who are passionate about helping us achieve that goal. In return we’re committed to making Westpac the best place to work in the country. Here are just a few of the ways we’re already doing that:

• Special offers on banking products and discounts from top brands, including generous employee-only mortgage rates!
• Flexible work arrangements to help you achieve a greater work life balance, and a variety of leave options including Culture, Lifestyle and Wellbeing leave.
• Tailored learning and development opportunities to help you grow your career within the bank.
• Lots of opportunities to give back to the Community by getting involved in our many volunteering initiatives

Create your future today
To get started, simply click on the APPLY button

We’re all about creating a supportive and inclusive community. We welcome everyone no matter your age, gender, background, or abilities. We also provide additional support to welcome our veterans, Indigenous Australians and neurodiverse community.

If you need any adjustments during the recruitment process, you can find more information and contact details on our FAQs and how to contact us page, under the Diversity, sustainability and flexibility section.

#LI - Hybrid