AddressWe've been trusted to serve Aussie communities since 1914 and grown to become a top 30-listed on the ASX with 120,000 team members and a portfolio of iconic brands. At Coles Group, you'll not only get to make a difference to millions of Aussie lives-you'll also get to see your impact.
About the team
Technology is the backbone of our business. Every day, our team solves complex and meaningful problems. Those solutions help thousands of our fellow team members succeed and make millions of customers lives easier every day. Our Digital team keeps us at the cutting edge. Driven by our innovative, inclusive and forward-thinking culture, we're constantly looking at ways to reinvent the shopping experience for our customers and build the next generation of digital retailing.
About the role
The security team at Coles is proud on their successful delivery of customer-focused solutions. There are a lot of exciting initiatives on the horizon as protecting our customers, team members and reputation is essential to being the most trusted retailer.
You will also:
- Be accountable for delivering business protect cyber testing and compliance services to Coles Financial Services, and Secure Payments
- Be the point of contact to key technology and business stakeholders of Security Engagement Team to build positive relationships and deliver pen testing capabilities
- This role is essential to maintain PCI-DSS compliance and will lead the transition to V4.0 from V3.2.1 Payments Standard for the Card Holder Data Environment.
About you and your skills:
- 10+ years Information Security experience working with information security management frameworks, including ISO, PCI-DSS and NIST
- Lead the transition to V4.0 from V3.2.1 Payments Standard for the Card Holder Data Environment.
- Proven track record in continually developing effective technical controls to protect Payments assets
- Detailed understanding of payments architectures and full stack of security capabilities
- Co-ordinating penetration tests, third parties and other security testing when required
- Managing own pipeline of work, including penetration testing, and meeting project recoverability targets
- Understanding of Information Security policies and standards, and security requirements across the systems lifecycle for new or changes to existing products and services
- Managing the timely communication of inherent risk with stakeholders
- Reporting to management concerning residual risk, vulnerabilities and other security exposures, including misuse of information assets and non-compliance
- Build strong relationships with all levels of stakeholders to achieve the implementation of Coles strategic pillars
- Strong written and verbal communication skills
- Excellent analytical and problem resolution skills
- In-depth knowledge and understanding of information risk concepts and principles, as a means of relating business needs to security controls
- Proficiency in performing risk, business impact, control, and vulnerability assessments
#LI-JG1
Take your next step into something bigger, apply now
With us it's not about the discounts (although you do get those), it's about joining a team where your wellbeing and professional development is invested in and celebrating your contributions is the norm. And because everyone leads unique lives, we offer flexible work including work from home, additional leave and parental leave entitlements.
We're continuing to build a gender equitable team, and a culture that's just as diverse, inclusive and welcoming as the communities we serve. We encourage applications from people of all ages, cultures (including Aboriginal and Torres Strait Islander peoples), abilities, sexual orientation and gender identities.
We're happy to adjust our recruitment process to support candidates with disability. Find out more in the 'Our Recruitment Process' section of our careers site.
Job ID: 114046
Employment Type: Full time
