Cyber Security Compliance Engineer

Adactin; Sydney; On-site; AUD 110,000 - 180,000; Full time

Job summary

Adactin Group is a 100% Australian-owned IT consulting firm based in Sydney, delivering digital transformation through Microsoft, AWS, AI, and QA. We seek a Cyber Security Compliance Engineer to assess and strengthen the organisation's ICT security and regulatory posture.

You will translate government and industry standards into practical technical controls, support audits, and drive continuous improvement with IT Operations, Infrastructure, and Project teams. Australian work rights are required.

Qualifications

• Strong background in Cyber Security and ICT Security Compliance or GRC.
• Familiar with Australian Government security frameworks ISM/PSPF and ISO 27001.
• Experience translating policies into technical controls and improvements.

Responsibilities

• Review ICT environments for alignment with security policies and standards.
• Translate frameworks like ISM/PSPF/ISO 27001 into technical requirements.
• Advise IT Operations on maintaining and improving security controls.
• Work with IT Projects to embed security/compliance in design and delivery.
• Identify security gaps, risks and weak controls across infrastructure and processes.
• Conduct compliance reviews, gap analyses and remediation planning.
• Support audits, including preparation, evidence collection and responses.
• Document security risks and communicate them to stakeholders.
• Collaborate with technical teams to implement effective controls.
• Monitor control effectiveness and suggest continuous improvements.
• Maintain security documentation, risk registers and evidence.

Skills

Cyber Security

GRC

ISMS/PSPF/ISM

ISO 27001

Azure security

Audits & controls

Stakeholder engagement

Cloud security

Job description

Adactin Group is a 100% Australian-owned global IT consulting company, headquartered in Sydney. We are a trusted technology partner helping organizations drive end-to-end digital transformation through our deep expertise in Microsoft and AWS ecosystems, AI-powered Digital Engineering, and future-ready Quality Assurance.

Our managed delivery approach, backed by domain expertise, ensures successful outcomes for every project. At Adactin, we believe in the power of our people. We foster a dynamic and supportive environment where your career can grow alongside exciting projects that shape the future of technology. Join us, and be part of a team committed to innovation, excellence, and making a difference.

Role Overview

We are seeking an experienced Cyber Security Compliance Engineer to assess, review and strengthen the organisation's ICT security and compliance posture. The role will work closely with IT Operations, Infrastructure, Cyber Security and Project teams to ensure technology environments, processes and solutions align with relevant government security frameworks, regulatory requirements and industry standards.

The successful candidate will bring a strong technical background across ICT infrastructure, combined with expertise in Governance, Risk and Compliance (GRC). They will be responsible for translating security and compliance obligations into practical technical controls, identifying risks and providing actionable recommendations to improve the organisation's overall security posture.

Key Responsibilities

• Review and assess ICT environments to evaluate alignment with security policies, compliance requirements and industry standards.
• Interpret and translate security and compliance frameworks, including the Australian Government Information Security Manual (ISM), Protective Security Policy Framework (PSPF) and ISO 27001, into practical technical and operational requirements.
• Provide security compliance advice and guidance to IT Operations teams to maintain and improve security controls across infrastructure, systems and operational processes.
• Work closely with IT Project teams to ensure security and compliance requirements are incorporated into project design, implementation and delivery.
• Assess technology solutions, infrastructure changes and operational processes to identify security gaps, compliance risks and control weaknesses.
• Conduct compliance reviews, control assessments and gap analyses, recommending appropriate remediation strategies.
• Support internal and external audits, including audit preparation, evidence collection, control validation and audit response activities.
• Identify, document and communicate security and compliance risks across IT projects and operational environments.
• Collaborate with technical stakeholders to translate regulatory and policy requirements into effective security controls and technical solutions.
• Monitor the effectiveness of implemented controls and provide recommendations for continuous improvement.
• Contribute to the development and maintenance of security documentation, policies, procedures, risk registers and compliance evidence.

Essential Skills and Experience

• Strong experience in Cyber Security, ICT Security Compliance, Security Engineering or Governance, Risk and Compliance (GRC).
• Strong understanding of Australian Government security frameworks, particularly ISM and PSPF.
• Practical knowledge of ISO 27001 security standards, controls and compliance requirements.
• Strong technical understanding of ICT infrastructure, including Microsoft Azure, Windows environments, End User Computing (EUC) and networking.
• Ability to interpret security policies, regulatory obligations and compliance requirements and translate them into technical controls and solutions.
• Experience conducting ICT security assessments, compliance reviews, gap analyses and risk assessments.
• Understanding of security control implementation, validation, monitoring and remediation.
• Experience supporting internal and external audits and responding to audit findings.
• Strong stakeholder engagement and communication skills, with the ability to work across technical and non-technical teams.
• Ability to articulate technical security risks and provide practical recommendations to address them.
• Experience working within Australian Government or regulated environments.
• Familiarity with Essential Eight and associated security maturity assessments.
• Knowledge of cloud security controls and Azure security architecture.
• Relevant certifications such as ISO 2701 Lead Implementer/Auditor, CISSP, CISM or CRISC.
• Experience with security risk management, control assurance and continuous compliance monitoring.

Due to the nature of the role, candidates must have valid Australian work rights.