AI DevSecOps Governance SME - Contract

NCS Australia; City of Melbourne; On-site; AUD 180,000 - 240,000; Full time

Job summary

NCS Australia is seeking an experienced AI DevSecOps Governance SME for a 12‑month contract in Sydney. You will lead governance frameworks, security standards, and policy enforcement powered by AI/LLMs to strengthen the enterprise SDLC.

You will implement automated controls for code reviews, threat modeling, and compliance checks within CI/CD pipelines, partnering with Security Architecture and Product teams to drive adoption and responsible AI usage.

Qualifications

• Experience establishing DevSecOps practices in enterprise environments.
• Practical AI/LLM tools experience for automating security governance.
• Ability translate regulatory and data privacy requirements into automated controls.
• Proficiency with CI/CD platforms, scripting (Python, Bash), and API integrations.
• Strong communication to drive security culture and developer adoption.

Responsibilities

• Design, implement, and enforce AI-driven DevSecOps governance and compliance standards.
• Build AI-assisted controls for automated code review and policy checks in CI/CD pipelines.
• Define governance roadmaps for developer AI usage and data privacy.
• Integrate security testing and automated remediation into modern CI/CD systems.
• Collaborate with Security Architecture, Engineering Leads, and Product teams.

Skills

DevSecOps

AppSec

Governance frameworks

CI/CD tooling

Python scripting

Stakeholder engagement

Education

Bachelor's degree in CS/Engineering or related field

Tools

GitHub Actions

GitLab CI

Azure DevOps

Job description

At NCS Australia, we believe in doing technology services better. Our commitment to quality, focus on people, and willingness to challenge traditional thinking set us apart. Our team brings this belief to life by partnering with our clients and communities to make tomorrow together.

We are committed to creating an environment that prioritises innovation, collaboration, and purposeful work. Our diverse team is empowered to make a meaningful impact with curiosity, creativity and resilience to shape better outcomes. Join us and accept the challenge of creating a better tomorrow.

Job Description

We are seeking an experienced AI DevSecOps Governance SME for an initial 12-month contract in Sydney to pioneer and scale AI-driven security governance across our enterprise software development lifecycle (SDLC).

In this forward-looking engineering role, you will lead the implementation of governance frameworks and security standards powered by Artificial Intelligence and Large Language Models (LLMs). You will be responsible for integrating intelligent automation directly into CI/CD pipelines—transforming how security policies, compliance checks, and code reviews are enforced across enterprise delivery teams.

Key Responsibilities

AI-Driven Security Governance: Design, implement, and enforce DevSecOps governance frameworks, security guardrails, and compliance standards utilizing AI capabilities and LLMs.

Automated Policy Enforcement: Build and deploy AI-assisted controls for automated code review, policy validation, threat modeling workflows, and security compliance checks within CI/CD pipelines.

Responsible AI & Security Standards: Establish policy guidelines and security baselines for developer AI usage (e.g., AI code assistants, generative models, and agentic workflows) to manage data privacy, IP, and code vulnerability risks.

Pipeline Integration & Shift-Left: Integrate intelligent security testing and automated remediation guidance seamlessly into modern CI/CD systems (e.g., GitHub Actions, GitLab CI, Azure DevOps).

Cross-Functional Leadership: Partner closely with Security Architecture, Engineering Leads, and Product Teams to define AI governance roadmaps and drive developer adoption across squads.

Qualifications

DevSecOps & AppSec Foundation: Deep hands-on experience establishing DevSecOps practices, CI/CD security controls, and application security standards in enterprise environments.

AI & LLM Implementation: Practical experience using AI/LLM tools to automate security governance, policy checking, or code review workflows (not just theoretical understanding).

Governance & Compliance: Proven ability to translate complex regulatory, security, and data privacy requirements into enforceable, automated software controls.

Pipeline Tooling & Automation: Proficiency with modern CI/CD platforms, scripting (Python, Bash), and APIs to integrate AI workflows into active pipelines.

Communication & Engagement: Excellent stakeholder management skills with a track record of driving security cultural shifts and developer adoption.

Exposure to secure AI deployment frameworks, model risk management, or AI safety standards (e.g., OWASP Top 10 for LLMs, NIST AI RMF).

Experience with enterprise code scanning tools (SAST, SCA, DAST) and AI-driven triage mechanisms.

Additional Information

Why NCS?

This is a place for people who like to get stuck in, bring ideas to life and make things happen. You'll work alongside experienced people who care about what they do, contribute to meaningful work and have the support to keep learning and grow your career. Whether you want to deepen your expertise, explore something new or take your career in a different direction, there's room to make it your own. We value Adventure, Excellence, Integrity, Ownership and Unity - bringing curiosity, collaboration and accountability to the way we work with our clients and each other.

Ready to make extraordinary happen?

We'd love to hear from you.

We celebrate diversity and inclusion

We value different perspectives, experiences and strengths our people bring. We're committed to an inclusive workplace where everyone has the opportunity to contribute, grow and succeed, and to providing equal employment opportunities and reasonable adjustments throughout the recruitment process.

Applicants will need valid Australian work rights and may be required to undergo relevant background, probity and police checks.