Phone call, then online test, then a remote video interview where instead of actually conducting a typical candidate interview, they performed a security audit of what I do at my current role. Just a bizarre way of interviewing candidates. Do I do X thing at my job? No. Bad! Did I do Y-related thing? No. Bad! Why is your security posture not like ours? I don't know, I guess we're not a bank? You're a terrible candidate! How dare you apply for this role! Some advice to Westpac: things that are bank-specific should be trained into employees when they're on-boarded - you can't expect everyone to have the same hardened security posture when they don't work at a bank. I say this as someone who works at a ISO270001 company and undergoes yearly security training and has been certified.