Level 4, 108 Wickham Street, Fortitude Valley, QLD, ****, AUSTRALIATanda is seeking a Group Information Security Officer to lead its security and compliance initiatives.
In this role, you'll manage SOC-2 audits, maintain up-to-date security documentation, and ensure Tanda's controls align with company policies and privacy laws.
You'll also deliver internal training, oversee the HackerOne bug bounty program, and respond to customer security inquiries.This is a hands-on position suited to someone who can balance ensuring our internal security controls are correct and verifying our application is secure too.
You'll play a key role in strengthening Tanda's security posture and fostering a culture of trust and compliance across the organisation.
This is an on-site position located at our Brisbane headquarters.Core responsibilitiesManage and oversee the SOC-2 audit process, working with external auditors to ensure Tanda's SOC-2 audits remain compliant and are completed in a timely wayManage and update Tanda's information security documentation to provide customers and prospects up to date information on Tanda's security practicesEnsure Tanda's information security controls are being implemented and managed in accordance with Tanda's information security policies and privacy lawFacilitate internal information security training to Tanda personnelRespond to customer and prospect privacy inquiries, including RFP security questionnairesManage Tanda's bug bounty program run through HackerOne.
Ensure critical findings are ticketed and fixedThe capability to be hands on and read code (with the help of AI) to find answers to questions that are not documented.
This includes Ruby on Rails, as well as infrastructure-as-code written in TerraformThe capability to QA changes made and verify fixes are implemented correctlyThe traits we value at all levels are:Curiosity - you like to learn,



and don't make the same mistakes twice.Problem solving - you are methodical in your approach to breaking apart problems and figuring out how to solve them in the best way possible under the constraints you face.About you:2+ years experience in a similar role, or equivalent demonstrated technical aptitude and career backgroundWhy Apply?
See your impactWe're a small team, but our product is global.
You can personally have a huge impact on our customers' productivity.Experience amazing opportunitiesWe recognise when people are exceptional, and as a scale-up, we're versatile enough to give people new opportunities to excel, both in existing teams and in new teams/roles.Solve deep and interesting problemsWorkforce management is an innovative industry, and creative solutions are a necessity to thrive.A genuinely great company cultureEnjoy fully stocked food and beverage fridges, book club, monthly "demo days" where everyone celebrates their best work, board game nights, and much more!
Further BenefitsReal projects: We hire based on real demand, not based on arbitrary hiring roundsExperience: You won't be shielded from customers or responsibilityCulture: You will be part of a team that is passionate about what they do and don't suffer boredom easilyTeam retreat: a full company retreat usually held at a coastal location for two nightsAbout TandaTanda is an established, fast-growing tech company.
We are on a mission to build Australia's leading all-in-one workforce management platform.
Our vision is to eliminate employment friction for shift and hourly workers, reducing the world's unemployment rate.
Our main activities centre around engineering, marketing, sales, research, and supporting functions.
We build software that helps businesses manage their rostering, time & attendance, staffing optimisation, employee engagement, payroll, and labour compliance.We service thousands of Australian clients from our Brisbane headquarters and globally with offices in Chicago and London.
#J-*****-Ljbffr

📌 Group Information Security Officer (Brisbane)
🏢 The Glen Hotel Pty
📍 Brisbane