Senior DevSecOps & GRC Security Leader

Paxus; Sydney; On-site; AUD 150,000 - 210,000; Full time

Job summary

Paxus is seeking a Senior Cyber Security Governance & DevSecOps Engineer to strengthen security across enterprise application development environments. The role emphasizes governance, risk, and compliance within CI/CD pipelines and hands-on DevSecOps practices.

You will design automated governance controls and guide teams on vulnerability management and risk mitigation, collaborating with security, architecture, and engineering stakeholders to uphold SSDLC standards.

Qualifications

• 10+ years of experience in Cyber Security.
• 5+ years in Cyber Security Engineering, AppSec, or DevSecOps with a strong focus on Governance, Risk, and Compliance (GRC).
• Proven experience designing and implementing automated governance and quality controls within enterprise CI/CD pipelines.
• Deep understanding of SSDLC, risk assessment and mitigation.
• Exceptional written communication for security instructions, standards, and risk reports.

Responsibilities

• Design, implement, and maintain security governance controls within enterprise CI/CD environments.
• Develop and enforce automated quality gates across platforms such as GitHub Actions, GitLab CI, Jenkins, Azure DevOps, Harness, Docker, and JFrog.
• Lead the assessment, evaluation, and management of application security risks and vulnerabilities.
• Facilitate risk acceptance and exemption processes, ensuring governance approvals are in place.
• Produce high-quality technical documentation, including security instructions, architectural handovers, governance standards, and risk assessment reports.
• Collaborate with development, engineering, architecture, and security teams to embed DevSecOps best practices.
• Monitor compliance with security policies, standards, and regulatory requirements.
• Provide expert advice on vulnerability management, risk scoring methodologies, and remediation strategies.

Skills

Cyber Security

DevSecOps

GRC

Threat & Vulnerability

Tools

GitHub Actions

Jenkins

Docker

JFrog

Job description

Paxus is seeking a Senior Cyber Security Governance & DevSecOps Engineer to strengthen security across enterprise application development environments. The role emphasizes governance, risk, and compliance within CI/CD pipelines and hands-on DevSecOps practices.

You will design automated governance controls and guide teams on vulnerability management and risk mitigation, collaborating with security, architecture, and engineering stakeholders to uphold SSDLC standards.