Policy-as-Code & Governance Security Consultant

Westpac Group; Sydney; On-site; AUD 120,000 - 160,000; Full time

Benefits offered by this job

Special offers on banking products and

Flexible work arrangements

Learning and development opportunities

Volunteer initiatives

Job summary

Westpac Group in Sydney is hiring an Information Security Consultant focused on Policy-as-Code and governance engineering. The role centers on transforming policy management, maintaining standards, and translating requirements into machine-readable controls.

You'll collaborate with architecture, risk and business teams, embed security into delivery, support audits, and use automation and AI to improve governance. On-site 2 days/week; Sydney-based.

Qualifications

• Governance, risk and compliance experience in technology environments.
• Translate regulatory and policy requirements into testable controls.
• Hands-on GitHub or Bitbucket for version control and governance workflows.
• Understand Policy-as-Code and control automation.
• Some Python scripting to support reporting.
• Experience with ServiceNow IRM/GRC and control mapping.

Responsibilities

• Develop and maintain Policy-as-Code governance capabilities.
• Embed cybersecurity requirements into technology solutions and delivery practices.
• Support audits, assurance and regulatory activities with evidence-based assessments.
• Monitor control effectiveness and remediation activities to reduce risk.
• Leverage automation and AI to enhance policy lifecycle management.

Skills

Governance

Policy-as-Code

Regulatory mapping

Python scripting

CI/CD

AI governance

OSCAL

JSON/YAML

GRC tooling

Tools

GitHub

Bitbucket

ServiceNow IRM/GRC

Palantir

OPA/Rego

Job description

Westpac Group in Sydney is hiring an Information Security Consultant focused on Policy-as-Code and governance engineering. The role centers on transforming policy management, maintaining standards, and translating requirements into machine-readable controls.

You'll collaborate with architecture, risk and business teams, embed security into delivery, support audits, and use automation and AI to improve governance. On-site 2 days/week; Sydney-based.