Job DescriptionSecurity Governance & ComplianceAssist in the development and maintenance of security documentation and compliance artefacts.Support Authority to Operate (ATO) activities and security accreditation requirements.Contribute to security governance, risk management, and compliance initiatives.Assist with audits, security assessments, and assurance activities.Interpret and apply security policies, standards, and regulatory requirements.Security Operations & TechnologyBuild, operate, and optimise security technologies including:Tenable.sc / NessusData Loss Prevention (DLP) solutionsEndpoint Security platformsWeb Proxy solutionsMalware Analysis SandboxesOnboard current hosts and systems into security monitoring platforms.
Configure and maintain vulnerability assessments and scanning activities.
Develop and maintain security policies, procedures, and technical documentation.Vulnerability & Threat ManagementConduct vulnerability assessments and support remediation activities.Analyse vulnerabilities, threats, and emerging security risks.Generate security reports and work with stakeholders to address identified risks.Update threat intelligence feeds, software versions, and security platform configurations.Incident Response & Security MonitoringSupport security incident investigation and response activities.Assist with file analysis and investigation of unusual user activities.Contribute to the development of SIEM monitoring rules and threat detection use cases.Support ongoing improvement of security monitoring capabilities.Network & Data ProtectionConfigure web proxy whitelisting and blacklisting rules.Implement and maintain DLP policies in alignment with organisational requirements.Assist in protecting sensitive information and reducing data loss risks.Stakeholder EngagementParticipate in security working groups and stakeholder forums.Prepare reports, risk assessments, briefings, and recommendations.Communicate security concepts to both technical and non-technical audiences.Promote security awareness and compliance across the organisation.We put people first.




We believe in the power of diversity to drive innovation and our Work180 accreditation, AWEI (Australian Workplace Equality Index) Gold Employer status and Rainbow Tick certification for LGBTI+ inclusion show that we value an inclusive culture.We offer tailored career paths across our global organization to support your professional and personal growth.Our customers trust us.
We have an excellent reputation across the region and globally.Best in class reward and recognition programs flexible work, volunteering leave and more.We live our values of aspiration, trust and empathy, all day, every day.About the EmployerWe use technology to make happier lives.
We are a global leader in technology and business solutions that transform organisations and the world around us.
We have a long heritage of bringing innovation and expertise, continuously working to contribute to the growth of society and our customers.About the CandidateWe are seeking a highly motivated Project Officer - Security & Compliance (PROF Level 4) to support cyber security, governance, risk, and compliance initiatives within a complex ICT environment.This role is responsible for helping maintain the confidentiality, integrity, and availability of information systems and data while ensuring compliance with security policies, regulatory obligations, and industry best practices.
Working closely with security and technical teams, you will contribute to security governance activities, compliance assurance, vulnerability management, incident response, and Authority to Operate (ATO) processes.The successful candidate will have a strong understanding of cyber security frameworks, risk management, security operations,



and stakeholder engagement.Strong understanding of cyber security principles, controls, and best practices.Knowledge of security frameworks and standards including:Australian Government Information Security Manual (ISM)Protective Security Policy Framework (PSPF)Essential EightISO *****NIST Cybersecurity FrameworkGovernance, Risk & ComplianceExperience supporting security governance, risk management, and compliance activities.Experience applying security policies, standards, and regulatory requirements.Experience supporting audits, assessments, accreditation, or assurance activities.Technical Security SkillsKnowledge of:Cloud SecurityIdentity and Access Management (IAM)Network SecurityVulnerability ManagementSecurity Monitoring and Incident ResponseAnalytical & Problem-Solving SkillsAbility to identify and assess cyber security risks.Strong analytical and investigative capabilities.Ability to develop practical remediation and mitigation strategies.Strong attention to detail and risk-based decision making.Communication & Stakeholder ManagementExcellent written and verbal communication skills.Ability to prepare technical and executive-level documentation.Ability to explain complex security concepts clearly.Strong stakeholder engagement and collaboration skills.Highly Desirable ExperienceCandidates with experience in any of the following will be highly regarded:TaniumTenable Security SolutionsCisco ISECisco Security ProductsMicrosoft Security TechnologiesTrellixCarbon BlackSecurity Information and Event Management (SIEM) platformsAuthority to Operate (ATO) ExperienceDevelopment of System Security Plans (SSPs)Development of System Security Plan Annexes (SSP-A)Security accreditation and assessment supportSecurity documentation and compliance artefactsAdditional Security KnowledgeEssential Eight implementation and complianceInformation Security Manual (ISM) compliance activitiesCentre for Internet Security (CIS) ControlsSecurity Technical Implementation Guides (STIGs)
#J-*****-Ljbffr

📌 Project Officer - Security & Compliance (Canberra)
🏢 Everi Pty
📍 Canberra