Job Description
Security Governance & Compliance
Assist in the development and maintenance of security documentation and compliance artefacts.
Support Authority to Operate (ATO) activities and security accreditation requirements.
Contribute to security governance, risk management, and compliance initiatives.
Assist with audits, security assessments, and assurance activities.
Interpret and apply security policies, standards, and regulatory requirements.
Security Operations & Technology
Build, operate, and optimise security technologies including:
Tenable.sc / Nessus
Data Loss Prevention (DLP) solutions
Endpoint Security platforms
Web Proxy solutions
Malware Analysis Sandboxes
Onboard new hosts and systems into security monitoring platforms. Configure and maintain vulnerability assessments and scanning activities. Develop and maintain security policies, procedures, and technical documentation.
Vulnerability & Threat Management
Conduct vulnerability assessments and support remediation activities.
Analyse vulnerabilities, threats, and emerging security risks.
Generate security reports and work with stakeholders to address identified risks.
Update threat intelligence feeds, software versions, and security platform configurations.
Incident Response & Security Monitoring
Support security incident investigation and response activities.
Assist with file analysis and investigation of unusual user activities.
Contribute to the development of SIEM monitoring rules and threat detection use cases.
Support ongoing improvement of security monitoring capabilities.
Network & Data Protection
Configure web proxy whitelisting and blacklisting rules.
Implement and maintain DLP policies in alignment with organisational requirements.
Assist in protecting sensitive information and reducing data loss risks.
Stakeholder Engagement
Participate in security working groups and stakeholder forums.
Prepare reports, risk assessments, briefings, and recommendations.
Communicate security concepts to both technical and non-technical audiences.
Promote security awareness and compliance across the organisation.
We put people first.



We believe in the power of diversity to drive innovation and our Work180 accreditation, AWEI (Australian Workplace Equality Index) Gold Employer status and Rainbow Tick certification for LGBTI+ inclusion show that we value an inclusive culture.
We offer tailored career paths across our global organization to support your professional and personal growth.
Our customers trust us. We have an excellent reputation across the region and globally.
Best in class reward and recognition programs flexible work, volunteering leave and more.
We live our values of aspiration, trust and empathy, all day, every day.
About the Employer
We use technology to make happier lives. We are a global leader in technology and business solutions that transform organisations and the world around us. We have a long heritage of bringing innovation and expertise, continuously working to contribute to the growth of society and our customers.
About the Candidate
We are seeking a highly motivated Project Officer - Security & Compliance (PROF Level 4) to support cyber security, governance, risk, and compliance initiatives within a complex ICT workplace.
This role is responsible for helping maintain the confidentiality, integrity, and availability of information systems and data while ensuring compliance with security policies, regulatory obligations, and industry best practices. Working closely with security and technical teams, you will contribute to security governance activities, compliance assurance, vulnerability management, incident response, and Authority to Operate (ATO) processes.
The successful candidate will have a strong understanding of cyber security frameworks, risk management, security operations, and stakeholder engagement.




Strong understanding of cyber security principles, controls, and best practices.
Knowledge of security frameworks and standards including:
Australian Government Information Security Manual (ISM)
Protective Security Policy Framework (PSPF)
Essential Eight
ISO *****
NIST Cybersecurity Framework
Governance, Risk & Compliance
Experience supporting security governance, risk management, and compliance activities.
Experience applying security policies, standards, and regulatory requirements.
Experience supporting audits, assessments, accreditation, or assurance activities.
Technical Security Skills
Knowledge of:
Cloud Security
Identity and Access Management (IAM)
Network Security
Vulnerability Management
Security Monitoring and Incident Response
Analytical & Problem-Solving Skills
Ability to identify and assess cyber security risks.
Strong analytical and investigative capabilities.
Ability to develop practical remediation and mitigation strategies.
Strong attention to detail and risk-based decision making.
Communication & Stakeholder Management
Excellent written and verbal communication skills.
Ability to prepare technical and executive-level documentation.
Ability to explain complex security concepts clearly.
Strong stakeholder engagement and collaboration skills.
Highly Desirable Experience
Candidates with experience in any of the following will be highly regarded:
Tanium
Tenable Security Solutions
Cisco ISE
Cisco Security Products
Microsoft Security Technologies
Trellix
Carbon Black
Security Information and Event Management (SIEM) platforms
Authority to Operate (ATO) Experience
Development of System Security Plans (SSPs)
Development of System Security Plan Annexes (SSP-A)
Security accreditation and assessment support
Security documentation and compliance artefacts
Additional Security Knowledge
Essential Eight implementation and compliance
Information Security Manual (ISM) compliance activities
Centre for Internet Security (CIS) Controls
Security Technical Implementation Guides (STIGs)
#J-*****-Ljbffr

📌 Project Officer - Security & Compliance (Canberra)
🏢 Everi Pty
📍 Canberra