Our team members nourish the bodies and minds of thousands of people every day, through food and support services focused on health and wellbeing. Creating bonds and connections between people and communities across Australia, Compass Group’s corporate footprint is designed for people, the planet and communities in which we work to thrive now and long into the future.
We are currently recruiting for a Cyber Security Specialist to join our team. This position can be based in any of our offices in Perth, Melbourne, Brisbane or Sydney. If you’re passionate about designing and implementing security frameworks and thrive in a collaborative environment, we’d love to hear from you.

THE ROLE

The Cyber Security Specialist is a multidisciplined role with responsibilities in both Security Architecture and Governance, Risk, and Compliance (GRC). This role will be responsible for designing and implementing security frameworks, ensuring compliance with industry standards, and managing risk across the organisation’s IT environment. The ideal candidate will have a blend of technical expertise and risk management capabilities to enhance the organization’s cybersecurity posture.

KEY RESPONSIBILITIES:

• Help develop and maintain security architecture frameworks, reference architectures, and technical security standards aligned with industry best practices.
• Collaborate with Infrastructure and applications team to ensure security is integrated into system designs, cloud environments, and application development.
• Conduct threat modelling and secure design reviews for new and existing IT systems.
• Evaluate and implement security technologies such as IAM, DLP and data governance solutions.
• Develop and maintain cybersecurity policies, standards, and guidelines to align with regulatory and business requirements.
• Lead risk assessments, gap analysis, and control effectiveness evaluations across enterprise IT and cloud environments.
• Assist with compliance to industry regulations and standards (e.g., ISO 27001).
• Conduct third-party risk assessments and review vendor security practices.
• Oversee security awareness training and ensure compliance with internal security policies.
• Technology Risk management - Ensure Technology risk mitigating activities implementation, perform Technology risk assessments.
• Incident Management – Support event and incident response process, Support cyber operations SME, in troubleshooting, resolution, and root cause analysis.
• Threat and Vulnerability management – Execute threat and vulnerabilities management activities, participate in the identification and categorisation of threats and vulnerabilities; Assist in the threat and vulnerabilities remediation and mitigation activities; Support testing activities and findings mitigation.
• Project Delivery – Assist in D&T project implementation and ensure cyber security risk mitigation strategies and technology architecture alignment is in place.
• Audit – support internal and external D&T Audit
• Operational Compliance - Monitor and feedback to operations teams on non-compliance for IT controls including patching, identity and endpoint management.