Product Owner, Vulnerability Services

First a bit about ANZ
At ANZ, everything we do boils down to ‘why’ – our purpose – to shape a world where people and communities thrive. We're just as focused on seeing our people thrive as well as our customers. We'll give you every opportunity to develop your career.
We are responding faster to changing customer requirements, focusing on the things that matter the most, energising our people, eliminating waste and reducing bureaucracy.
ANZ has started to move to a new way of working, leveraging agile practices. To understand more about this new way of working and if this role is right for you, we strongly encourage you to take a look at The ANZ Way vimeo channel where you’ll find The ANZ Way animation and the New Ways of Working animation.

Your team’s mission?
Cyber Defence is uplifting and enhancing its Vulnerability Services to ensure clear situational awareness for platform owners around vulnerabilities present in their operational environment. This squad provides timely reports of identified vulnerabilities, have extensive coverage of the ANZ operating environment and ensure platform owners are managing vulnerabilities in-line with compliance obligations.

As a Product Owner in the Vulnerability Services squad you will set strategy and direction to enable and inspire a multi-disciplinary team ('Squad') to build Vulnerability Services and related capabilities. The Product Owner constantly prioritises tasks and the squad’s backlog with the customer at the heart of their decision making.

The Product Owner also ensures that the work is strategically aligned to the tribe mission and engages with other Product Owners to align and manage interdependencies. Whilst this role is not a people manager, it is a key leadership role, galvanising the squad around a vision and supporting them to successfully deliver customer value at pace.

You’ll help to deliver this by bringing the following skillset/experiences:

• Able to guide a cross-functional team of security analysts and engineers providing subject-matter expertise to successfully deliver vulnerability assessment services across the enterprise IT systems
  
• Have a strong understanding of the tools, processes around vulnerability assessments and end-to-end management of identified vulnerabilities
  
• Passion and excitement for all things related to vulnerabilities be it at the network level, operating system level or application level – ability to sell a vision and set directions
  
• Ability to deliver service aligned to an agile delivery model.
  
• Advanced verbal and written communications skills
  

Desired:

• Experience in the usage of Tenable/Tripwire IP360/Qualys toolset for vulnerability scanning activity covering various IT systems and hybrid environments including internal and Internet facing systems, servers, devices, containers, cloud environment
  
• Execution of compliance driven vulnerability scanning exercise at enterprise level (example: PCI scanning)
  
• Assist in vulnerability prioritisation and provide remediation guidance to the concerned team
  
• Experience in enterprise level reporting and tracking of vulnerabilities to be consumed by the system owners and other stake holders
  
• Knowledge of integration and automation of vulnerability scanning tools and processes at an enterprise level
  
• Assist, define, implement, operate and continuously improve vulnerability scanning processes and operational procedures
  
• Maintain vulnerability scanning toolset (Tenable/Tripwire IP360/Qualys/similar toolset) deployed enterprise wide
  
• Integration of vulnerability scanning toolset with enterprise reporting tools such as Tableau and QlikView
  
• A desire to continuously learn new techniques / technologies and bring innovative ideas into the Squad
  
  

At ANZ we aim to create an inclusive environment where employee differences such as gender, age, culture, disability, sexual orientation, family and caring responsibilities and religion are valued.

We work flexibly at ANZ. Talk to us and let us know how this role can be flexible for you.

#GD4.2