Where you'll add value

The Cyber Security Architect will assist with designing and ensuring the implementation of robust security architectures that meet the organisation’s evolving cyber threat landscape, regulatory requirements and internal security policies and standards.

The role will embed secure by design practices, provide pragmatic security advice to delivery teams, and ensure material security risks are identified and addressed throughout the solution lifecycle.

The Cyber Security Architect will work closely with business and technology teams, particularly the Architecture team, to embed secure-by-design practices across new and changing solutions. The role will define security requirements, facilitate threat modelling, and establish and verify the security assurance requirements that must be met throughout the solution lifecycle. The role will also support the ongoing development and implementation of the organisation’s Cyber Security Strategy and Implementation Plan.

Working as part of an inclusive and collaborative team, your key responsibilities will include:

- Lead security architecture and secure-by-design reviews for new and changing technology solutions.
- Define security requirements, architecture principles, patterns and guardrails across applications, cloud, infrastructure, APIs, identity and third‑party services.
- Conduct threat modelling and security risk assessments to identify credible threats, control gaps and departures from security standards.
- Recommend proportionate controls and practical remediation options that reflect the solution’s risk, criticality and delivery context.
- Provide architecture assurance throughout the delivery lifecycle, including reviewing security designs,



testing strategies and relevant assurance evidence.
- Assess third‑party and externally hosted solutions to identify security dependencies, integration risks and required controls.
- Document architecture decisions, security risks, exceptions and control requirements, escalating unresolved material risks through the appropriate governance processes.
- Contribute to information security policies, standards and architecture frameworks, and communicate security risks and decisions clearly to technical teams, project leaders, risk stakeholders and senior management.

What sets you up for success

- Demonstrated experience in cyber security architecture or a comparable senior technical security role.
- Solid security architecture knowledge across applications, cloud services, infrastructure, networks, identity, data and APIs. Practical knowledge of cloud security across IaaS, PaaS and SaaS environments, ideally including Microsoft Azure, AWS or multi‑cloud environments.
- Experience conducting secure-by-design reviews, threat modelling and security risk assessments for complex technology solutions. Ability to translate business, regulatory and policy requirements into clear and proportionate technical security requirements and controls.
- Understanding of contemporary application security and DevSecOps practices, including secure coding, SAST, DAST,



software composition analysis, vulnerability management and penetration testing.
- Experience applying recognised practices and frameworks such as NIST, OWASP, MITRE ATT&CK;, CIS Controls or the Essential Eight.
- Solid written and verbal communication skills, including the ability to explain complex security issues, constructively challenge proposed designs and influence stakeholders.
- Sound judgement and the ability to balance security, customer, operational and delivery considerations.
- Experience in banking, financial services or another regulated environment, and familiarity with APRA CPS 234, NIST CSF, PCI DSS, ISO 27001 and Australian privacy requirements, would be advantageous.
- Degree or diploma in Cyber Security, Information Systems or relevant field or equivalent experience desirable.
- Relevant certifications such as CISSP, CISSP-ISSAP, SABSA, TOGAF or recognised cloud security qualifications are desirable.

What we can offer you

There's life at work, and life outside of work, and we understand that. That's why we offer an extensive range of employee benefits.

- Enjoy flexible work arrangements.
- Be supported with leadership and professional development, such as education assistance, mentoring, and emerging leadership programs.
- Generous discounts on home loans, personal loans, insurance and other banking products and services.
- An incentive scheme for exceptional performance, up to two weeks’ additional purchased leave per year, and novated lease program.
- 12 weeks paid parental leave for the primary care giver, and three weeks for the non-primary care giver.
- Two days’ paid volunteer leave each

📌 Cyber Security Architect (Brisbane)
🏢 BCU Bank
📍 Brisbane