Security & Compliance Lead: AI Governance (Hybrid)

Matchbox; Sydney; Hybrid; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Equity for everyone

L&D allowance

Wellness benefits

Generous leave

Job summary

Dovetail is seeking a Security Engineering Lead to own governance, risk and compliance across SOC 2, ISO/IEC 27001 and ISO/IEC 42001. You will shape AI governance, automate evidence collection, and drive security tooling alongside engineering teams in Sydney.

You will manage risk, vendor assessments, and enterprise security questionnaires while growing hands-on security engineering capabilities and ensuring secure product delivery.

Qualifications

• Experience running SOC 2 and ISO/IEC 27001 programmes in a software business.

Responsibilities

• Own security risk across the product and supply chain, maintain risk register and drive mitigations.
• Lead compliance programmes for SOC 2, ISO 27001 and ISO 42001 end-to-end, including scoping and audits.
• Be the technical voice in enterprise deals, handling security questionnaires and due diligence.
• Automate evidence collection and posture reporting with tooling across teams.
• Grow into hands-on security engineering, including cloud security posture and vulnerability management.
• Define AI governance standards and controls for AI systems and providers.
• Contribute to security incident response and mature escalation processes.
• Mentor engineers and product teams to embed security decisions in design.

Skills

GRC ownership

SOC 2

ISO 27001

ISO 42001

AI governance

Cloud security

AWS tooling

Security architecture

Enterprise engagement

Vendor risk

Tools

GuardDuty

Security Hub

Inspector

Detective

EKS

Pulumi

Terraform

Job description

Dovetail is seeking a Security Engineering Lead to own governance, risk and compliance across SOC 2, ISO/IEC 27001 and ISO/IEC 42001. You will shape AI governance, automate evidence collection, and drive security tooling alongside engineering teams in Sydney.

You will manage risk, vendor assessments, and enterprise security questionnaires while growing hands-on security engineering capabilities and ensuring secure product delivery.