About Right SecRight Sec is an Australian cybersecurity company specialising in cyber governance, risk and compliance (GRC), cybersecurity advisory, managed security services and cybersecurity technology solutions. We are developing an advanced, AI-enabled Cyber Governance, Risk and Compliance platform to help organisations assess cybersecurity maturity, manage cyber risks, automate compliance processes and make informed decisions about their security posture. Position Overview We are seeking an experienced Full-Stack Software Engineer with cybersecurity GRC expertise and practical knowledge of Artificial Intelligence to lead technical development activities across our Cyber GRC platform. The successful candidate will take responsibility for the end-to-end development and ongoing evolution of the platform, including software architecture, backend and frontend development, cloud infrastructure, security, technical documentation and coordination of development activities. Beyond technical proficiency, the candidate must understand the business logic underpinning cybersecurity GRC platforms, including risk calculations, control effectiveness, compliance assessments, maturity models, framework mappings and audit workflows. The role requires technical autonomy, strong problem-solving capabilities and the ability to translate complex cybersecurity requirements into scalable, secure and intelligent software solutions.
Key Responsibilities
1. Full-Stack Software Engineering
• Design, develop, maintain and optimise full-stack web applications, including architecture, implementation, testing and ongoing improvements.
• Develop robust backend systems using Python, FastAPI, SQLAlchemy, Alembic and PostgreSQL.
• Build modern, scalable frontend applications using React, Vite, Type Script, Java Script and Tailwind CSS.
• Develop and maintain RESTful APIs, database models, business logic and application workflows.
• Design modular and reusable software components that support ongoing platform expansion.
• Implement and maintain containerised development and deployment environments using Docker.
• Troubleshoot defects, optimise application performance and ensure the reliability and maintainability of the platform.2. Cyber GRC Frameworks & Business Logic
• Translate cybersecurity governance, risk and compliance requirements into functional software specifications and business rules.
• Develop and maintain platform capabilities aligned with recognised cybersecurity frameworks, including:
• ISO/IEC 27001 and ISO/IEC 27002
• NIST Cybersecurity Framework (CSF)
• Australian Essential Eight
• Queensland Government IS18 and QGISCF
• Other applicable cybersecurity and regulatory frameworks
• Implement assessment logic for cybersecurity maturity, compliance scoring, control implementation and control effectiveness.
• Develop and maintain risk assessment methodologies, including inherent risk, likelihood, consequence, mitigating controls and residual risk.
• Implement control mappings across multiple frameworks, enabling reuse of assessment evidence and identification of compliance gaps.
• Develop workflows supporting risk registers, Statements of Applicability, audit findings, remediation activities and compliance reporting.
• Ensure that automated assessments and calculations accurately reflect approved cybersecurity methodologies and business requirements.
• Collaborate with Right Sec's cybersecurity consultants to validate GRC logic and assessment outcomes.3. Artificial Intelligence & Automation




• Design and integrate AI-enabled capabilities within the Cyber GRC platform.
• Develop AI-assisted functionality for compliance assessments, evidence analysis, document interpretation, risk identification and recommendation generation.
• Work with Large Language Models (LLMs), prompt engineering, Retrieval-Augmented Generation (RAG) and AI agents.
• Support the development of intelligent GRC assistants and AI vCISO capabilities.
• Integrate AI models and services through APIs and cloud-based infrastructure.
• Implement safeguards to improve AI accuracy, consistency, explainability and traceability.
• Ensure AI-generated assessments and recommendations are grounded in approved frameworks, business rules and authorised data.
• Identify opportunities to automate manual GRC processes and improve platform efficiency.4. Cloud Infrastructure, Security & Identity Management
• Configure, manage and optimise AWS cloud infrastructure, including:
• Amazon S3
• Amazon EC2
• AWS Amplify
• Maintain application deployment environments and supporting cloud services.
• Implement secure authentication and authorisation solutions using Auth0 and Microsoft Entra ID.
• Develop and maintain role-based access controls and secure user management capabilities.
• Apply secure coding principles, appropriate data protection controls and software security best practices.
• Support infrastructure monitoring, troubleshooting, performance optimisation and application availability.
• Ensure scalability, reliability and security across platform components.5. Technical Leadership & Agile Development
• Lead technical aspects of Agile software development, including sprint planning, task allocation and development prioritisation.
• Create, assign and manage development tasks using Git Hub.
• Maintain technical roadmaps and contribute to product development planning.
• Administer Git Hub repositories, branches and development workflows.
• Conduct code reviews, evaluate Pull Requests and approve code changes.
• Establish and maintain software engineering standards and version control practices.
• Provide technical guidance, mentoring and support to other developers.
• Collaborate with cybersecurity consultants and business stakeholders to clarify requirements and validate technical solutions.
• Take ownership of technical challenges and proactively identify solutions.6. Technical Documentation & Quality Assurance
• Create and maintain comprehensive technical documentation in Confluence, including:
• Software architecture and design
• Backend and frontend architecture
• Frontend scaffolding and development standards
• Database schemas and API documentation
• Infrastructure configuration and deployment procedures
• Change management and release documentation
• Develop and maintain automated tests, including unit and integration tests.
• Ensure high standards of code quality, performance, security and scalability.
• Support structured release management, change control and continuous improvement.
• Maintain documentation sufficient to support platform continuity, knowledge transfer and future development.



Required Qualifications & Experience Software Engineering
• Degree in Software Engineering, Computer Science, Information Technology or a related discipline, or equivalent professional experience.
• Minimum 2 years of professional software engineering experience, preferably developing cybersecurity, GRC or enterprise SaaS applications.
• Demonstrated full-stack development experience using Python and modern Java Script/Type Script frameworks.
• Practical experience with:
• Python, FastAPI, SQLAlchemy and Alembic
• PostgreSQL
• React, Vite, Type Script and Tailwind CSS
• Docker
• Git and Git Hub
• REST APIs and database-driven applications
• Experience with AWS cloud infrastructure and application deployment.
• Understanding of secure authentication, authorisation and identity management.
• Ability to work independently across frontend, backend and infrastructure components. Cybersecurity GRC
• At least 2 years of practical exposure to cybersecurity GRC frameworks, GRC software development or the implementation of GRC business logic.
• Working knowledge of ISO 27001, NIST CSF and the Australian Essential Eight.
• Understanding of risk assessment methodologies, compliance assessments and cybersecurity maturity models.
• Ability to translate cybersecurity controls and framework requirements into software rules, calculations and workflows.
• Familiarity with control effectiveness, framework mappings, risk registers and compliance evidence management. Artificial Intelligence
• Practical understanding of AI technologies and their application to software development.
• Familiarity with LLMs, prompt engineering and AI model integration.
• Ability to develop or integrate AI-assisted functionality using APIs.
• Understanding of AI output validation, data security and responsible AI implementation. Highly Desirable
• Previous experience developing or maintaining a commercial GRC, ISMS, risk management or cybersecurity compliance platform.
• Experience implementing automated risk scoring, control maturity assessments and cross-framework mappings.
• Familiarity with Queensland Government IS18 and QGISCF.
• Experience with Amazon Bedrock or equivalent managed AI services.
• Practical experience implementing RAG pipelines, AI agents or intelligent document analysis.
• Experience with Auth0 and Microsoft Entra ID integrations.
• Experience leading small development teams, reviewing code and mentoring junior developers.
• Experience working with Agile delivery processes, Git Hub Projects and Confluence. Key Competencies The successful candidate will demonstrate:
• Technical autonomy: Ability to independently design, implement and troubleshoot complex software solutions.
• Cyber GRC understanding: Ability to understand the cybersecurity methodologies behind the software rather than simply implementing predefined screens and workflows.
• Problem-solving: Solid analytical skills and the ability to identify and resolve architectural, technical and business logic challenges.
• Technical leadership: Ability to coordinate development activities, maintain coding standards and support other developers.
• Quality and security: Commitment to secure development, reliable functionality and maintainable code.
• Innovation: Ability to identify practical opportunities to incorporate AI and automation into cybersecurity GRC processes.
• Communication: Ability to work effectively with technical developers, cybersecurity consultants and business stakeholders.

📌 Senior Full-Stack Software Engineer (Brisbane)
🏢 trabajo au
📍 Brisbane