Company Description

Showtime Consulting is a leading provider of Shielded Cloud and Digital Solutions across Australia and New Zealand. We specialise in delivering secure, enterprise-scale technology solutions across cloud, infrastructure, cybersecurity, business applications, and digital transformation programs.

Company Description

Showtime Consulting is a leading provider of Shielded Cloud and Digital Solutions across Australia and Recent Zealand. We specialise in delivering secure, enterprise-scale technology solutions across cloud, infrastructure, cybersecurity, business applications, and digital transformation programs.

We partner with government and enterprise organisations to build high-performing technology teams that deliver scalable, efficient, and future-ready business solutions.

The Role

We are seeking an experienced AI SME – DevSecOps Governance & Standards to design, implement, and operationalise governance frameworks, standards, controls, and operating models that support secure software delivery in modern engineering environments.

You will work across engineering, security, cloud, architecture, risk, compliance, and operations teams to establish best practices for DevSecOps and identify opportunities where Artificial Intelligence can improve security, governance, compliance, risk management, and engineering productivity.

This role requires a combination of strategic thinking, technical expertise, governance design, and stakeholder engagement to deliver practical outcomes across large and complex technology environments.

Key Responsibilities

- Assess existing DevSecOps maturity, governance structures, controls,



tooling, and delivery practices.
- Identify gaps, risks, inefficiencies, and opportunities for improvement.
- Design and implement DevSecOps governance frameworks and operating models.
- Establish decision-making structures, accountabilities, control requirements, and assurance processes.
- Define exception management and governance review processes.
- Develop roadmaps for DevSecOps capability uplift and transformation.

DevSecOps Standards & Control Design

- Develop and maintain DevSecOps policies, standards, procedures, and implementation guidelines.
- Define minimum security and quality requirements across the software development lifecycle.
- Establish controls covering:
- Source code management
- Branching strategies
- Code reviews
- Build pipelines
- Repository management
- Deployment processes
- Production operations

- Create reusable governance patterns and engineering guardrails.

AI-Enabled DevSecOps Implementation

- Identify opportunities where AI can improve delivery, security, risk management, and governance.
- Define and prioritise AI-enabled DevSecOps use cases.
- Support implementation of AI-assisted capabilities including:
- Secure coding assistants
- Automated code review
- Vulnerability analysis




- Remediation recommendations
- Test case generation
- Threat modelling support
- Policy interpretation
- Compliance evidence generation

- Establish governance and controls for responsible AI usage within engineering practices.

Implementation & Integration

- Translate governance requirements into practical and enforceable engineering controls.
- Integrate controls into:
- CI/CD pipelines
- Source control platforms
- Cloud environments
- Security tooling
- Developer workflows

- Implement automated compliance and policy enforcement where possible.
- Support platform teams with embedding controls into delivery processes.

Stakeholder Engagement & Change Management

- Facilitate workshops across engineering, security, compliance, risk, architecture, and delivery teams.
- Provide expert guidance on AI, DevSecOps, security, and governance topics.
- Influence stakeholders and drive adoption of new standards and practices.
- Communicate complex technical concepts in a clear and practical manner.
- Support organisational change and capability uplift initiatives.

Expected Deliverables

- Current-state DevSecOps governance and AI capability assessment.
- Target-state DevSecOps governance framework and operating model.
- DevSecOps policy, standards, and control catalogue.
- AI-enabled DevSecOps use case assessment and prioritisation framework.
- Security and quality control baselines.
- Engineering governance patterns and implementation guidance.
- Executive and stakeholder reporting materials.
- Adoption and maturity improvement recom

📌 Lead Cyber Security (Sydney)
🏢 Showtime Consulting
📍 Sydney