Security & Compliance Officer

About the role

A full-time, permanent Technical Security and Compliance Officer is sought in Sydney to coordinate cybersecurity governance, risk, compliance, assurance and improvement across internal teams and the managed service provider. You will turn organisational risks, regulatory obligations and business needs into a prioritised roadmap with clear owners, milestones, evidence and treatment actions, and act as a key contact for auditors, partners and stakeholders.

Key responsibilities

• Maintain the security and compliance roadmap, remediation backlog, priorities, dependencies, owners, target dates and delivery status with ICT leadership.
• Coordinate security audits and assurance, including evidence validation, secure sharing, stakeholder follow-up and tracking findings to closure.
• Test and report on assigned controls across Microsoft 365, identity, endpoint, application and data environments, working with control owners and the MSP to remediate gaps.
• Maintain incident response and disaster recovery playbooks, contacts, escalation paths and communications, and coordinate post-incident reviews.
• Maintain security policies, standards, control documentation, risk and exception registers, compliance obligations and governance reporting.
• Coordinate security risk assessments for projects, suppliers and material technology changes, and support security awareness and compliance.

Required profile

• Experience in cybersecurity governance, risk, compliance, control assurance, audit coordination and technology risk management; security product or control portfolio experience is desirable.
• Knowledge of the ASD Essential Eight, security frameworks, access governance, privacy, risk and audit evidence, and the ability to turn requirements into testable controls.
• Experience coordinating internal teams, managed service providers, auditors and specialist vendors.
• Relevant qualifications or certifications in cybersecurity, IT, risk, audit or compliance are desirable.
• Must meet all role-specific pre-employment screening and probity requirements.

Required skills

• Microsoft 365 Azure security and compliance, including identity, privileged access, endpoints, data protection, logging, monitoring and reporting.
• Strong documentation, analysis, prioritisation and communication skills.

What we offer

• Flexible work: a mix of office, community and remote work.
• Salary packaging of $15,900 plus $2,650 for entertainment through not-for-profit salary packaging.
• Five weeks' annual leave, 14 weeks' paid maternity leave, ten days' development leave plus a $1,000 allowance.
• Fitness passport, reduced health and general insurance, and Perkbox discounts.
• Access to clinical services colleagues across NSW, QLD and ACT, with peer supervision.
• Tailored adjustments, flexible options, a psychologically safe workplace and staff networks.

To apply, submit an updated resume and a brief cover letter outlining your most relevant skills and experience; internal applicants must notify their manager, who may ask for endorsement.