Security & Compliance Lead - Hybrid/Remote

Northcott; Sydney; On-site; AUD 120,000 - 160,000; Full time

Benefits offered by this job

5 weeks leave

Salary packaging

Parental Leave: 14 weeks

Learning & development leave

Wellness program

Job summary

Northcott seeks a full-time Technical Security and Compliance Officer to coordinate governance, risk, compliance, assurance and improvement across internal teams and our MSP.

You will translate risks and regulatory obligations into a prioritised roadmap with owners, milestones, evidence and actions; serve as the audit contact for auditors and stakeholders with clear reporting and audit-ready evidence.

Qualifications

• Experience in cybersecurity governance, risk, compliance, control assurance and audit coordination.
• Knowledge of ASD Essential Eight, security frameworks, access governance, privacy, risk and audit evidence.
• Experience coordinating internal teams, MSPs, auditors and vendors to deliver security outcomes.
• Knowledge of Microsoft 365 security and compliance (identity, endpoints, data protection, logging, monitoring).
• Strong documentation, analysis, prioritisation and communication skills to translate risks into actions.
• Qualifications or certifications in cybersecurity, IT, risk, audit or compliance are desirable.
• Must meet pre-employment screening and probity requirements.

Responsibilities

• Maintain the security and compliance roadmap, remediation backlog, priorities and owners with ICT leadership.
• Coordinate security audits and assurance, track findings and actions to closure.
• Test and report on controls across Microsoft 365, identity, endpoint, application and data environments; remediate gaps with MSP.
• Maintain incident response and disaster recovery playbooks; coordinate post-incident reviews and corrective actions.
• Maintain security policies, standards, control documentation, risk registers and governance reporting.
• Coordinate security risk assessments for projects, suppliers and technology changes; support security awareness.

Skills

Cybersecurity governance

Audit coordination

MS 365 security

Risk management

Documentation & communication

Education

Cybersecurity certifications/IT risk qualifications

Job description

Northcott seeks a full-time Technical Security and Compliance Officer to coordinate governance, risk, compliance, assurance and improvement across internal teams and our MSP.

You will translate risks and regulatory obligations into a prioritised roadmap with owners, milestones, evidence and actions; serve as the audit contact for auditors and stakeholders with clear reporting and audit-ready evidence.