Bendigo Bank builds Australia's first Agentic SOC: Banking cybersecurity operations move towards an AI-driven era

Introduction

Bendigo Bank is reshaping its cybersecurity operations—not simply by upgrading tools, but by fundamentally changing how the security team works. The bank's Chief Security Officer, Gajan Ananthapavan, revealed at the recent Google Cloud Summit Sydney that Bendigo Bank has completed the migration to Google Cloud's security technology stack within four months and plans to build Australia's first "Agentic SOC" (intelligent security operations center). This move reflects that AI agents are moving from concept to actual deployment, and the Australian banking industry is expected to be a pioneer in this trend.

Background: Traditional SOCs Struggle to Counter Attacks at Machine Speed

Traditional security operations centers rely on large numbers of Level 1 and Level 2 analysts to handle alert triage and incident response. However, as cyber threats become increasingly automated and scaled, human response speeds can no longer keep up with the pace of attacks. Ananthapavan pointed out that changes in the threat environment require incident response capabilities to achieve "machine speed." He believes that traditional SOC teams "will not exist in their current form," and future security operations will be supported by AI agents, with humans focusing on higher-value work.

Bendigo Bank's response strategy is to fully embrace Agentic AI. The bank switched from multiple previously used security systems to a single technology stack from Google Cloud—including Google Threat Intelligence, Google SecOps, and Security Command Center. The old systems were shut down within four months, and the savings were reinvested into building Agentic capabilities. Ananthapavan stated that this approach has brought "greater flexibility and financial freedom."

In-depth Analysis

Business Level: Dual Enhancement of Efficiency and Competitiveness

For Bendigo Bank, the direct benefit of the Agentic SOC is improved operational efficiency. AI agents can automatically handle a large number of routine alerts and make autonomous decisions under preset rules, significantly reducing average response times. At the same time, senior security analysts are freed from repetitive tasks to focus on value-added work such as threat hunting and strategy optimization. From a financial perspective, shutting down redundant systems and reducing reliance on junior analysts will lower long-term labor costs.

In Australia's increasingly competitive retail banking market, stronger cybersecurity capabilities mean higher customer trust and brand reputation. As a regional bank, Bendigo Bank's move helps narrow the gap with the Big Four banks in technology investment and even take the lead in certain areas.

Industry Level: The Cybersecurity Labor Market Faces ReshapingThe rise of Agentic SOC will have a profound impact on Australia's cybersecurity employment market. Ananthapavan predicts that "low-level security analyst positions will decrease," while "senior roles requiring higher-level skills will increase." For Australia, which currently faces a cybersecurity talent shortage, this is both a challenge and an opportunity. Training systems need to shift from cultivating alert handlers to developing AI model management and threat analysis specialists.

At the same time, this trend will accelerate the upgrade of Security Orchestration, Automation and Response (SOAR). Agentic AI is seen as an evolved version of SOAR—not only executing predefined playbooks but also making more complex decisions through reasoning. Google Cloud and PwC, as partners of Bendigo Bank, are actually co-defining this new standard. Other banks and financial institutions are likely to accelerate their adoption under Bendigo Bank's demonstrative effect, thereby driving growth across the entire cybersecurity technical services market.

Investment and Trade Perspective: Tech Giants Accelerate Deployment in the Australian Security Market

Bendigo Bank's Agentic SOC project is built on the Google Cloud platform, highlighting the penetration of hyperscale cloud service providers into Australia's security sector. By offering integrated SecOps and threat intelligence services, Google Cloud is competing with Microsoft and AWS for financial institution clients. PwC, as a system integrator, has further strengthened its position in the AI security consulting field.

For Australian本土 cybersecurity startups, the Agentic SOC trend may have a two-fold impact: on one hand, they have opportunities to develop AI agent solutions tailored to specific industries (such as banking); on the other hand, they must compete with the native security capabilities of cloud giants. Capital may increasingly flow to startups that complement cloud platforms or offer differentiated AI capabilities.

Long-term Trends: AI Agents to Become Standard in Security Operations

Looking ahead 3–10 years, Agentic SOC is likely to transition from early adopter pilots to an industry standard. However, this process faces challenges: issues such as model trustworthiness, decision transparency, and regulatory compliance need to be addressed one by one. Bendigo Bank currently maintains a "human-in-the-loop" model, and will gradually "remove humans from the loop" only after the model matures.

For the Australian financial industry, establishing an AI security governance framework as early as possible is critical. Regulators such as APRA may soon issue new cybersecurity guidelines for Agentic SOC. Additionally, the "self-healing" capabilities of AI agents—such as automatically adjusting network firewall rules—will further enhance the dynamic resilience of defense systems.

ConclusionBendigo Bank's Agentic SOC plan is not only an upgrade of its own security operations but also a landmark event in the transformation of the Australian banking industry toward an AI-driven cybersecurity model. It reveals an industry trend: traditional SOCs are becoming obsolete, and AI agents will take over an increasing number of frontline defense tasks. For corporate decision-makers and investors, paying attention to the business opportunities and talent structure changes brought about by this shift will be key to gaining a competitive advantage in the future.