Security Specialist - Enterprise Data Protection

Worker Type:

Here at BNZ, it's about more than just banking. We work together in an agile, energising environment to create innovative solutions through our promise "If you can imagine a better future, let's find a way."

We support wellbeing, flexible working and have a generous leave offering. There is the opportunity for growth, learning and career development. No two days are the same.

The Enterprise Data Protection (EDP) team plays a pivotal role in safeguarding the bank’s critical data assets, ensuring compliance, and mitigating risks. Using cutting-edge tools the team implements robust security strategies, responds to incidents and drives innovation in data governance, fostering trust and resilience in the bank’s operations.

This is an Auckland based hybrid role with three days in the office - Tuesday, Wednesday and Thursday as anchor days, and two days where you can work flexibly.

Mō te Tūranga | About the Role

We sat down with the People Leader (who you would report to) and they told us the following about the role:

What are 5 day-today tasks the person in this role will complete?

• Review, prioritise and triage DLP alerts and support tickets across email, endpoint, web and cloud channels, focusing on high-risk events, reducing false positives and escalating complex incidents where required.
• Investigate data loss events end-to-end, engaging with internal stakeholders to validate intent, assess impact, perform root cause analysis and document outcomes in line with incident response standards.
• Tune and optimise DLP policies and configurations within platforms such as Microsoft Purview, Zscaler and CrowdStrike (including rule logic, classification labels and detection patterns) to improve signal-to-noise ratio and reduce alert fatigue.
• Analyse trends and recurring patterns in alerts, identifying opportunities for process improvement, automation and control uplift to strengthen the Bank’s information protection posture.
• Mentor and support analysts and graduates, providing guidance on investigations, quality of documentation and stakeholder engagement, while contributing to daily operational updates and reporting.

What is the team culture and environment like?

We have a team culture which is fun, collaborative and supportive, enabling career growth and a sense of ownership.

What is your management style?

I trust and empower the team to make decisions based on metrics and team consensus. I strive to provide a fun and happy work environment where every member of the team has clear objectives, regular feedback and opportunities for growth – thus providing a safe environment for innovation and problem-solving. Recognising achievements, offering mentorship and ensuring a healthy work-life balance scores highly on my priority list.

What technical skills are REQUIRED for this role?

Proven hands-on experience triaging security alerts, conducting structured investigations, performing log analysis and responding to data loss incidents across enterprise environments. Strong working knowledge of DLP policy configuration and tuning, including classification rules and regex pattern matching, within tools such as Microsoft Purview, Zscaler, CrowdStrike and SIEM platforms is required. The successful candidate will demonstrate a methodical approach to incident handling, the ability to reduce false positives through effective rule optimisation, and confidence operating across endpoint, email, web and cloud security controls.

What attributes will this person display in order to be successful in this role?

We are looking for someone with a strong analytical and investigative mindset who can distinguish genuine data risk from noise and make balanced, risk-based decisions. They will demonstrate curiosity, attention to detail and a proactive, process-oriented approach to continuously improving DLP effectiveness through policy optimisation, automation opportunities and reduction of operational waste. The successful candidate will communicate clearly and confidently with stakeholders, translate technical findings into business impact, collaborate effectively across technology, risk and business teams, and actively mentor junior analysts while contributing to a high-performing, learning-focused team culture.

PLEASE NOTE: Advertising closes Wednesday 25 February at 11pm.

Nau Mai ki te Pēke o Aotearoa | Come to the Bank of New Zealand

This is an exciting opportunity to join us!  We're bold thinkers who are taking brave steps to create a company that people want to work for, and customers want to bank with. If you're ready to join a fun organisation where we are proud of our culture and how we are helping New Zealander's to 'Find their way', then show your interest by submitting your application - we can't wait to read it. 

Ehara taku toa i te toa takitahi, engari he toa takitini" - Success is not the work of an individual, but the work of many.”

Applications will be reviewed regularly across the advertising period, but we do reserve the right to close applications early.