Join hummgroup, one of Australasia’s most successful and enduring non-bank financial services institutions. We specialise in fast, easy finance with a market-leading range of business asset finance, credit cards and point of sale payment plan solutions designed around the core needs of today’s businesses and retail consumers.

Come join our team and be a part of our next chapter of innovation and growth.

What's so exciting about this role?

We’re seeking an experienced cybersecurity expert to help safeguard our digital assets. You’ll work closely with cloud, infrastructure, engineering and delivery teams to identify, assess and mitigate vulnerabilities, ensuring secure and resilient systems. This is a hands-on role, crucial to our cloud-first cybersecurity projects, implementing Zero Trust strategies.

What Does An Average Day Look Like?

No day is average at humm but here’s an idea of what you can expect to do in this role:

• Proactively identify and participate in continuous improvement initiatives within cloud, infrastructure, engineering and delivery teams to ensure we improve our cybersecurity posture and maintain a safe digital environment.
• Respond to cyber incidents, following established procedures for troubleshooting and incident resolution.
• Conduct AI security reviews to ensure the safe and ethical use of AI technologies within the group.
• Support the penetration testing and/or red teaming exercise.
• Oversee the cybersecurity platforms or tools, ensuring effective detection, prevention, and governance

Who will thrive in this role?

You are an experienced Security Engineer with strong cloud security expertise and proven incident management experience.

We’re also looking for someone who brings:

• Experience implementing and managing Zero Trust security frameworks
• Proficiency in AWS services such as ECS, EKS, EC2, S3, Lambda and cloud security services such as IAM, KMS, CloudTrail, CloudWatch, Config, Security Hub, WAF, Inspector, and Amazon GuardDuty. 
• Proficiency in Azure security related services such as Entra ID, Security Center, Key Vault, and Purview. 
• Exposure to implementing CI/CD for software development including static scan, software composition analysis, and dynamic scan. 
• Experience with security information & event management, endpoint or extended detection and response, cloud security posture management, and threat exposure management tools. 
• Experience in incident response, risk assessments, and implementing preventative measures.
• Security related certifications such as CISSP, CCSP, SANS would be highly regarded.

Working at hummgroup

We embrace flexible working arrangements, ensuring a genuine work-life balance and a fun, vibrant inclusive culture that embraces diverse perspectives and values the unique contributions of each of our team through our behaviours Leadership - Accountability - Collaboration - Commerciality.