Role Purpose 

As the Manager of Data Protection, you will be responsible for leading and managing the Data Protection platforms and their associated team. This includes designing, developing, and maintaining platforms to achieve critical control outcomes, ensuring compliance with regulatory standards, and aligning data security and protection initiatives across NAB and BNZ. You will also play a key role in shaping the direction of the Data Protection function while driving operational excellence. 

KEY RESPONSIBILITIES 

Strategic Leadership: 

• Own and lead the Data Protection platforms to meet organization goals. 

• Drive the alignment of data security and data protection practices across NAB and BNZ. 

• Ensure platforms are designed and operated in compliance with internal standards, policies, and external regulatory requirements. 

• Manage departmental budgets and contribute to the achievement of KPIs for the function. 

• Act as a subject matter expert (SME) to provide guidance and consultation to internal and external stakeholders. 

Team Management: 

• Lead, mentor, and develop the Data Protection team, fostering a culture of collaboration and excellence. 

• Manage team operations, including leave, timesheets, MyID roles, and service accounts. 

• Review, allocate, and brief team members on new tasks and priorities. 

• Provide technological and organizational support to the team. 

Operational Excellence: 

• Review, triage, and action incidents, vulnerabilities, and platform issues. 

• Assess and approve changes raised by the team while reviewing and addressing changes from other teams for impact. 

• Ensure timely management of GRACE controls, findings, and treatment plans. 

• Deliver and maintain platform capabilities to meet Data Loss Prevention (DLP) outcomes. 

• Monitor and ensure adherence to SLAs related to availability, currency, and vulnerabilities. 

• Provide regular reporting on platform activities, achievements, and issues. 

• Lead the resolution of risks, problems, or incidents. 

Stakeholder Engagement: 

• Attend and represent the team in meetings with vendors, stakeholders, and leadership teams. 

• Communicate effectively across various teams to provide advice and ensure alignment on data protection initiatives. 

• Collaborate with stakeholders to prioritize and deliver initiatives, projects, and service improvements. 

Day-to-Day Activities: 

• Respond to emails and manage team mailboxes. 

• Oversee platform issues and ensure proactive resolution. 

• Enable ongoing monitoring of team and platform performance. 

• Provide support for after-hours incidents, when required. 

YOUR SKILLS AND EXPERIENCE 

Generic Capabilities: 

• Proven ability to lead and deliver strategic outcomes. 

• Strong people leadership and stakeholder management skills. 

• Experience managing controls, findings, and treatment plans to meet compliance and regulatory expectations. 

• Ability to manage and optimize departmental budgets and resources. 

• Exceptional communication and documentation skills. 

Role-Specific Capabilities: 

• Strong technical competence in the design, engineering, and operation of security and data protection platforms. 

• Expertise in driving platform capabilities to achieve DLP and data protection outcomes. 

• Ability to prioritize and manage multiple initiatives, requests, and incidents in a fast-paced environment. 

• In-depth knowledge of risks, vulnerabilities, and data security controls. 

• Proficiency with relevant DLP platforms and tools 

Experience Requirements: 

• 10+ years in a technical security role. 

• 3+ years in a technical data protection role. 

• 3+ years in a leadership role, managing teams, projects, or platforms. 

Qualification Requirements: 

• Tertiary qualification in a relevant field is required. 

• Relevant certifications in cybersecurity, data protection, or platform management are desirable. 

Career Path: 

This role offers a pathway to broader leadership roles within Cyber Platforms and Engineering, including Manager of other Security Teams (e.g., Network Security or Workplace and Mobility) and eventually progressing to HO Cyber Platforms and Engineering.