Security Lead – AWS | ASX-listed RegTech | North Sydney (hybrid)

About the company

Our client is an ASX-listed RegTech providing a cloud-native SaaS platform to regulated markets in Australia and overseas. They build technology that protects consumers and helps organisations meet their regulatory obligations, and they hold their platform to high security and compliance standards.

The role

This is a hands-on Security Lead role for someone who still loves working in the tooling. You’ll own the technical security of an AWS-native platform, reporting to the CIO, with real influence over how security is done across the group.

What you’ll do
Secure an AWS-native SaaS platform: EKS, Terraform, CI/CD pipelines, container image scanning and secrets management
Operate and improve security controls across AWS and Microsoft settings, including identity, logging, monitoring and guardrails
Lead incident response and run vulnerability management through to closure
Work with engineering on application security, threat modelling and secure development practices




Support ISO 27001, SOC 2 and IRAP assessments with the technical evidence and expertise they need

About you
A hands-on senior security practitioner, the person colleagues bring the hardest security problems to
Proven experience operating AWS security in production (for example GuardDuty, Security Hub, IAM, SCPs, EKS)
A current security certification, such as CISSP, CISM, CCSP or AWS Security Specialty
Incident response and vulnerability management experience
Exposure to ISO 27001, SOC 2 or the ISM/IRAP is highly regarded
Australian citizenship is required due to security clearance requirements

Why join
Real ownership of security in a growing, ASX-listed company
A up-to-date AWS-native stack
A mission that genuinely helps people
Hybrid working from North Sydney

How to apply

Apply via LinkedIn or message Kristy Ward at Forwards Talent for a confidential conversation.

📌 Security Lead Sydney (Australia)
🏢 Forwards Talent
📍 Australia