Adactin Group is a 100% Australian-owned global IT consulting company, headquartered in Sydney. We are a trusted technology partner helping organizations drive end-to-end digital transformation through our deep expertise in Microsoft and AWS ecosystems, AI-powered Digital Engineering, and future-ready Quality Assurance.

Our managed delivery approach, backed by domain expertise, ensures successful outcomes for every project. At Adactin, we believe in the power of our people. We foster a agile and supportive environment where your career can grow alongside exciting projects that shape the future of technology. Join us, and be part of a team committed to innovation, excellence, and making a difference.

Role Overview

We are seeking an experienced Cyber Security Compliance Engineer to assess, review and strengthen the organisation's ICT security and compliance posture. The role will work closely with IT Operations, Infrastructure, Cyber Security and Project teams to ensure technology environments, processes and solutions align with relevant government security frameworks, regulatory requirements and industry standards.

The successful candidate will bring a strong technical background across ICT infrastructure, combined with expertise in Governance, Risk and Compliance (GRC). They will be responsible for translating security and compliance obligations into practical technical controls, identifying risks and providing actionable recommendations to improve the organisation's overall security posture.

Key Responsibilities

- Review and assess ICT environments to evaluate alignment with security policies, compliance requirements and industry standards.
- Interpret and translate security and compliance frameworks, including the Australian Government Information Security Manual (ISM),



Protective Security Policy Framework (PSPF) and ISO 27001, into practical technical and operational requirements.
- Provide security compliance advice and guidance to IT Operations teams to maintain and improve security controls across infrastructure, systems and operational processes.
- Work closely with IT Project teams to ensure security and compliance requirements are incorporated into project design, implementation and delivery.
- Assess technology solutions, infrastructure changes and operational processes to identify security gaps, compliance risks and control weaknesses.
- Conduct compliance reviews, control assessments and gap analyses, recommending appropriate remediation strategies.
- Support internal and external audits, including audit preparation, evidence collection, control validation and audit response activities.
- Identify, document and communicate security and compliance risks across IT projects and operational environments.
- Collaborate with technical stakeholders to translate regulatory and policy requirements into effective security controls and technical solutions.
- Monitor the effectiveness of implemented controls and provide recommendations for continuous improvement.
- Contribute to the development and maintenance of security documentation, policies, procedures, risk registers and compliance evidence.

Essential Skills and Experience

- Strong experience in Cyber Security,



ICT Security Compliance, Security Engineering or Governance, Risk and Compliance (GRC).
- Strong understanding of Australian Government security frameworks, particularly ISM and PSPF.
- Practical knowledge of ISO 27001 security standards, controls and compliance requirements.
- Strong technical understanding of ICT infrastructure, including Microsoft Azure, Windows environments, End User Computing (EUC) and networking.
- Ability to interpret security policies, regulatory obligations and compliance requirements and translate them into technical controls and solutions.
- Experience conducting ICT security assessments, compliance reviews, gap analyses and risk assessments.
- Understanding of security control implementation, validation, monitoring and remediation.
- Experience supporting internal and external audits and responding to audit findings.
- Strong stakeholder engagement and communication skills, with the ability to work across technical and non-technical teams.
- Ability to articulate technical security risks and provide practical recommendations to address them.

Desirable Skills

- Experience working within Australian Government or regulated environments.
- Familiarity with Essential Eight and associated security maturity assessments.
- Knowledge of cloud security controls and Azure security architecture.
- Relevant certifications such as ISO 27001 Lead Implementer/Auditor, CISSP, CISM or CRISC.
- Experience with security risk management, control assurance and continuous compliance monitoring.

Due to the nature of the role, candidates must have valid Australian work rights.

Feel free to contact [email protected] , to know more details about the role.

📌 Cyber Security Compliance Engineer (Sydney)
🏢 Adactin
📍 Sydney