Lead Cyber Security

Showtime Consulting; Sydney; On-site; AUD 180,000 - 240,000; Full time

Job summary

Showtime Consulting in Sydney seeks an experienced AI SME – DevSecOps Governance & Standards to design, implement, and operationalise governance frameworks, standards, controls, and operating models that support secure software delivery in modern engineering environments.

You will collaborate across engineering, security, cloud, architecture, risk, compliance, and operations to establish best practices for DevSecOps and identify opportunities where AI can improve security, governance, risk

Qualifications

• 8+ years across DevSecOps, App Security, Cloud Security, Governance, Tech Risk, Cyber Security, Secure Delivery.
• 3+ years applying AI/ML within software engineering, security, governance or compliance contexts.
• Proven track record designing and implementing DevSecOps governance frameworks and operating models.

Responsibilities

• Assess current DevSecOps maturity, governance structures, controls, tooling and delivery practices.
• Identify gaps, risks, inefficiencies and improvement opportunities.
• Design and implement DevSecOps governance frameworks and operating models.

Skills

DevSecOps

Application Security

Cloud Security

Software Governance

Technology Risk

Cyber Security

Secure Delivery

Education

Bachelor's or Master's in CS/SE/InfoSec

Tools

GitHub

GitLab

Azure DevOps

Jenkins

SonarQube

SAST/DAST tools

Container security platforms

Job description

Company Description

Showtime Consulting is a leading provider of Shielded Cloud and Digital Solutions across Australia and New Zealand. We specialise in delivering secure, enterprise-scale technology solutions across cloud, infrastructure, cybersecurity, business applications, and digital transformation programs.

Company Description

Showtime Consulting is a leading provider of Shielded Cloud and Digital Solutions across Australia and New Zealand. We specialise in delivering secure, enterprise-scale technology solutions across cloud, infrastructure, cybersecurity, business applications, and digital transformation programs.

We partner with government and enterprise organisations to build high-performing technology teams that deliver scalable, efficient, and future-ready business solutions.

The Role

We are seeking an experienced AI SME – DevSecOps Governance & Standards to design, implement, and operationalise governance frameworks, standards, controls, and operating models that support secure software delivery in modern engineering environments.

You will work across engineering, security, cloud, architecture, risk, compliance, and operations teams to establish best practices for DevSecOps and identify opportunities where Artificial Intelligence can improve security, governance, compliance, risk management, and engineering productivity.

This role requires a combination of strategic thinking, technical expertise, governance design, and stakeholder engagement to deliver practical outcomes across large and complex technology environments.

Key Responsibilities

• Assess existing DevSecOps maturity, governance structures, controls, tooling, and delivery practices.
• Identify gaps, risks, inefficiencies, and opportunities for improvement.
• Design and implement DevSecOps governance frameworks and operating models.
• Establish decision-making structures, accountabilities, control requirements, and assurance processes.
• Define exception management and governance review processes.
• Develop roadmaps for DevSecOps capability uplift and transformation.

DevSecOps Standards & Control Design

• Develop and maintain DevSecOps policies, standards, procedures, and implementation guidelines.
• Define minimum security and quality requirements across the software development lifecycle.
• Establish controls covering:
  • Source code management
  • Branching strategies
  • Code reviews
  • Build pipelines
  • Repository management
  • Deployment processes
  • Production operations
• Create reusable governance patterns and engineering guardrails.

AI-Enabled DevSecOps Implementation

• Identify opportunities where AI can improve delivery, security, risk management, and governance.
• Define and prioritise AI-enabled DevSecOps use cases.
• Support implementation of AI-assisted capabilities including:
  • Secure coding assistants
  • Automated code review
  • Vulnerability analysis
  • Remediation recommendations
  • Test case generation
  • Threat modelling support
  • Policy interpretation
  • Compliance evidence generation
• Establish governance and controls for responsible AI usage within engineering practices.

Implementation & Integration

• Translate governance requirements into practical and enforceable engineering controls.
• Integrate controls into:
  • CI/CD pipelines
  • Source control platforms
  • Cloud environments
  • Security tooling
  • Developer workflows
• Implement automated compliance and policy enforcement where possible.
• Support platform teams with embedding controls into delivery processes.

Stakeholder Engagement & Change Management

• Facilitate workshops across engineering, security, compliance, risk, architecture, and delivery teams.
• Provide expert guidance on AI, DevSecOps, security, and governance topics.
• Influence stakeholders and drive adoption of new standards and practices.
• Communicate complex technical concepts in a clear and practical manner.
• Support organisational change and capability uplift initiatives.

Expected Deliverables

• Current-state DevSecOps governance and AI capability assessment.
• Target-state DevSecOps governance framework and operating model.
• DevSecOps policy, standards, and control catalogue.
• AI-enabled DevSecOps use case assessment and prioritisation framework.
• Security and quality control baselines.
• Engineering governance patterns and implementation guidance.
• Executive and stakeholder reporting materials.
• Adoption and maturity improvement recommendations.

What You'll Need

• 8+ years of experience across:
  • DevSecOps
  • Application Security
  • Cloud Security
  • Software Engineering Governance
  • Technology Risk
  • Cyber Security
  • Secure Software Delivery
• 3+ years of practical experience applying AI or Machine Learning within software engineering, security, governance, risk, or compliance environments.
• Proven experience designing and implementing DevSecOps governance frameworks and operating models.
• Experience developing security policies, standards, controls, and secure SDLC practices.
• Strong understanding of governance, risk, and compliance principles.
• Demonstrated experience implementing automated controls and policy-as-code frameworks.
• Hands‑on understanding of:
  • CI/CD platforms
  • Source control systems
  • Cloud platforms
  • Containers
  • Infrastructure as Code (IaC)
  • Application Security Testing
  • Software Supply Chain Security
• Experience integrating security controls into engineering workflows.
• Strong workshop facilitation and stakeholder engagement skills.
• Exceptional communication and documentation skills.
• Ability to influence technical and non-technical stakeholders at all levels.

Preferred Skills

• Experience with AI-assisted development tools and engineering platforms.
• Knowledge of Responsible AI frameworks and governance models.
• Experience implementing security automation and compliance-as-code.
• Understanding of modern cloud-native architectures and platform engineering.
• Experience working within highly regulated industries.
• Familiarity with DevSecOps tooling including GitHub, GitLab, Azure DevOps, Jenkins, SonarQube, SAST, DAST, and container security platforms.
• Experience developing enterprise-wide security and DevSecOps strategies.

Qualifications & Certifications

• Bachelor's or Master's degree in Computer Science, Software Engineering, Cyber Security, Information Technology, or a related discipline.
• Equivalent practical industry experience will also be considered.