About The Opportunity

We are seeking a full-time, permanent Technical Security and Compliance Officer to coordinate cybersecurity governance, risk, compliance, assurance and improvement across internal teams and our managed service provider.

You will translate organisational risks, regulatory obligations and business needs into a prioritised roadmap with clear owners, milestones, evidence and treatment actions. As a key contact for auditors, partners and stakeholders, you will provide clear reporting, prompt follow-up and audit-ready evidence.

Tasks Include

• Maintain the security and compliance roadmap, remediation backlog, priorities, dependencies, owners, target dates and delivery status with ICT leadership.
• Coordinate security audits and assurance, including evidence validation, secure sharing, stakeholder follow-up, and tracking findings and actions to closure.
• Test and report on assigned controls across Microsoft 365, identity, endpoint, application and data environments; work with control owners and the MSP to remediate gaps and verify closure.
• Maintain and exercise incident response and disaster recovery playbooks, contacts, escalation paths and communications; coordinate post-incident reviews and close corrective actions.
• Maintain security policies, standards, control documentation, risk and exception registers, compliance obligations and governance reporting.
• Coordinate security risk assessments for projects, suppliers and material technology changes, and support organisation-wide security awareness and compliance.
• 
  

Role Requirements

• Experience in cybersecurity governance, risk, compliance, control assurance, audit coordination and technology risk management; security product or control portfolio experience is desirable.
• Knowledge of the ASD Essential Eight, security frameworks, access governance, privacy, risk and audit evidence, and the ability to convert requirements into testable controls.
• Experience coordinating internal teams, managed service providers, auditors and specialist vendors to deliver security outcomes.
• Knowledge of Microsoft 365 Azure security and compliance, including identity, privileged access, endpoints, data protection, logging, monitoring and reporting.
• Strong documentation, analysis, prioritisation and communication skills, with the ability to translate technical risks into practical business actions.
• Relevant qualifications or certifications in cybersecurity, IT, risk, audit or compliance are desirable.
• The successful candidate must meet all role-specific pre-employment screening and probity requirements.