Lead Cyber Security

Showtime Consulting; Sydney; On-site; AUD 140,000 - 190,000; Full time

Job summary

Showtime Consulting seeks an experienced AI SME – DevSecOps Governance & Standards to design, implement, and operationalise governance frameworks, standards, controls and operating models supporting secure software delivery at enterprise scale.

You will collaborate with engineering, security, cloud, architecture, risk and compliance teams to establish best practices for DevSecOps and explore AI-driven improvements in governance, security and productivity.

Qualifications

• Bachelor's or Master's degree in Computer Science, Software Engineering, Cyber Security, IT, or related.
• ≥8 years in DevSecOps, Security, Cloud, or software governance.
• Experience designing governance frameworks and policy-as-code.
• Strong workshop facilitation and stakeholder engagement.

Responsibilities

• Assess current DevSecOps maturity, governance structures, controls, tooling, and delivery practices.
• Design and implement governance frameworks and operating models.
• Define delegation, accountability, control requirements, and assurance processes.
• Develop roadmaps for capability uplift and transformation.
• Identify AI-enabled use cases for secure software delivery.
• Translate governance requirements into practical engineering controls.

Skills

DevSecOps

Application Security

Cloud Security

Governance

Risk & Compliance

Secure SDLC

CI/CD

Security Automation

Education

Bachelor's or Master's in CS/SE/Cyber Security

Tools

GitHub

GitLab

Azure DevOps

Jenkins

SonarQube

Job description

Drive AI-enabled DevSecOps governance, security controls, and standards to improve secure software delivery at enterprise scale.

08th October, 2026

Company Description
Showtime Consulting is a leading provider of Shielded Cloud and Digital Solutions across Australia and New Zealand. We specialise in delivering secure, enterprise-scale technology solutions across cloud, infrastructure, cybersecurity, business applications, and digital transformation programs.
We partner with government and enterprise organisations to build high-performing technology teams that deliver scalable, efficient, and future-ready business solutions.
The Role
We are seeking an experienced AI SME – DevSecOps Governance & Standards to design, implement, and operationalise governance frameworks, standards, controls, and operating models that support secure software delivery in modern engineering environments.
You will work across engineering, security, cloud, architecture, risk, compliance, and operations teams to establish best practices for DevSecOps and identify opportunities where Artificial Intelligence can improve security, governance, compliance, risk management, and engineering productivity.
This role requires a combination of strategic thinking, technical expertise, governance design, and stakeholder engagement to deliver practical outcomes across large and complex technology environments.
Key Responsibilities

• Assess existing DevSecOps maturity, governance structures, controls, tooling, and delivery practices.
• Identify gaps, risks, inefficiencies, and opportunities for improvement.
• Design and implement DevSecOps governance frameworks and operating models.
• Establish decision-making structures, accountabilities, control requirements, and assurance processes.
• Define exception management and governance review processes.
• Develop roadmaps for DevSecOps capability uplift and transformation.

08th October, 2026

Company Description
Showtime Consulting is a leading provider of Shielded Cloud and Digital Solutions across Australia and New Zealand. We specialise in delivering secure, enterprise-scale technology solutions across cloud, infrastructure, cybersecurity, business applications, and digital transformation programs.
We partner with government and enterprise organisations to build high-performing technology teams that deliver scalable, efficient, and future-ready business solutions.
The Role
We are seeking an experienced AI SME – DevSecOps Governance & Standards to design, implement, and operationalise governance frameworks, standards, controls, and operating models that support secure software delivery in modern engineering environments.
You will work across engineering, security, cloud, architecture, risk, compliance, and operations teams to establish best practices for DevSecOps and identify opportunities where Artificial Intelligence can improve security, governance, compliance, risk management, and engineering productivity.
This role requires a combination of strategic thinking, technical expertise, governance design, and stakeholder engagement to deliver practical outcomes across large and complex technology environments.
Key Responsibilities

• Assess existing DevSecOps maturity, governance structures, controls, tooling, and delivery practices.
• Identify gaps, risks, inefficiencies, and opportunities for improvement.
• Design and implement DevSecOps governance frameworks and operating models.
• Establish decision-making structures, accountabilities, control requirements, and assurance processes.
• Define exception management and governance review processes.
• Develop roadmaps for DevSecOps capability uplift and transformation.

DevSecOps Standards & Control Design

• Develop and maintain DevSecOps policies, standards, procedures, and implementation guidelines.
• Define minimum security and quality requirements across the software development lifecycle.
• Establish controls covering:
  • Source code management
  • Branching strategies
  • Code reviews
  • Build pipelines
  • Repository management
  • Deployment processes
  • Production operations
• Create reusable governance patterns and engineering guardrails.

AI-Enabled DevSecOps Implementation

• Identify opportunities where AI can improve delivery, security, risk management, and governance.
• Define and prioritise AI-enabled DevSecOps use cases.
• Support implementation of AI-assisted capabilities including:
  • Secure coding assistants
  • Automated code review
  • Vulnerability analysis
  • Remediation recommendations
  • Test case generation
  • Threat modelling support
  • Policy interpretation
  • Compliance evidence generation
• Establish governance and controls for responsible AI usage within engineering practices.

Implementation & Integration

• Translate governance requirements into practical and enforceable engineering controls.
• Integrate controls into:
  • CI/CD pipelines
  • Source control platforms
  • Cloud environments
  • Security tooling
  • Developer workflows
• Implement automated compliance and policy enforcement where possible.
• Support platform teams with embedding controls into delivery processes.

Stakeholder Engagement & Change Management

• Facilitate workshops across engineering, security, compliance, risk, architecture, and delivery teams.
• Provide expert guidance on AI, DevSecOps, security, and governance topics.
• Influence stakeholders and drive adoption of new standards and practices.
• Communicate complex technical concepts in a clear and practical manner.
• Support organisational change and capability uplift initiatives.

Expected Deliverables

• Current-state DevSecOps governance and AI capability assessment.
• Target-state DevSecOps governance framework and operating model.
• DevSecOps policy, standards, and control catalogue.
• AI-enabled DevSecOps use case assessment and prioritisation framework.
• Security and quality control baselines.
• Engineering governance patterns and implementation guidance.
• Executive and stakeholder reporting materials.
• Adoption and maturity improvement recommendations.

What You'll Need

• 8+ years of experience across:
  • DevSecOps
  • Application Security
  • Cloud Security
  • Software Engineering Governance
  • Technology Risk
  • Cyber Security
  • Secure Software Delivery
• 3+ years of practical experience applying AI or Machine Learning within software engineering, security, governance, risk, or compliance environments.
• Proven experience designing and implementing DevSecOps governance frameworks and operating models.
• Experience developing security policies, standards, controls and secure SDLC practices.
• Strong understanding of governance, risk, and compliance principles.
• Demonstrated experience implementing automated controls and policy-as-code frameworks.
• Hands-on understanding of:
  • CI/CD platforms
  • Source control systems
  • Cloud platforms
  • Containers
  • Infrastructure as Code (IaC)
  • Application Security Testing
  • Software Supply Chain Security
• Experience integrating security controls into engineering workflows.
• Strong workshop facilitation and stakeholder engagement skills.
• Exceptional communication and documentation skills.
• Ability to influence technical and non-technical stakeholders at all levels.

Preferred Skills

• Experience with AI-assisted development tools and engineering platforms.
• Knowledge of Responsible AI frameworks and governance models.
• Experience implementing security automation and compliance-as-code.
• Understanding of modern cloud-native architectures and platform engineering.
• Experience working within highly regulated industries.
• Familiarity with DevSecOps tooling including GitHub, GitLab, Azure DevOps, Jenkins, SonarQube, SAST, DAST and container security platforms.
• Experience developing enterprise-wide security and DevSecOps strategies.

Qualifications & Certifications

• Bachelor's or Master's degree in Computer Science, Software Engineering, Cyber Security, Information Technology, or a related discipline.
• Equivalent practical industry experience will also be considered.