Software Compliance Manager

RPMGlobal Holdings Limited; Brisbane; Hybrid; AUD 130,000 - 190,000; Full time

Job summary

RPMGlobal Holdings Limited in Brisbane invites a Software Compliance Manager to lead security, licensing compliance, and risk-based remediation across our software portfolio. You will partner with engineering and product teams to embed secure development practices.

This permanent, in-office role with optional remote work requires 3+ years in software product environments, knowledge of OWASP, SAST/DAST, and ISO standards.

Qualifications

• Minimum 3 years' experience in a software product organisation delivering commercial software to external customers.
• Experience in software security, application security, software assurance, secure software development, or software compliance.
• Experience with SAST, SCA, IAST, and DAST vulnerability analysis and remediation.

Responsibilities

• Ensure software compliance across RPMGlobal's software portfolio and provide leadership on software security and compliance best practice.
• Manage open-source software governance, licensing obligations, and third-party software compliance
• Assess vulnerabilities identified through SAST, SCA, IAST, DAST and any other related security testing activities and provide remediation guidance to development teams
• Maintain software compliance evidence and support audit readiness activities
• Contribute to the evolution of secure software development practices and development standards
• Support ISO 9001 processes aligned with ISO 27001 and corporate security requirements
• Assist with security awareness, developer training initiatives, and continuous improvement activities

Skills

Software security

Application security

Vulnerability management

OSS governance

Secure development practices

Risk-based remediation

English communication

Tools

SAST

SCA

IAST

DAST

Job description

About the Role

RPMGlobal (RPM) is seeking a Software Compliance Manager to join our Technology team. The role will work across a large software development environment, helping product teams strengthen software security, manage compliance obligations and maintain customer trust.

Working across multiple product teams, the Software Compliance Manager will provide technical leadership in software security, licensing compliance, secure development practices, and vulnerability management. The role works closely with software engineers, architects, product teams, and business stakeholders to embed security and compliance requirements throughout the software development lifecycle.

This is an opportunity for a technically minded professional who enjoys working across teams, influencing outcomes, and improving the way software is designed, built, tested and released. The role combines practical application security expertise with the ability to balance risk, business outcomes, and engineering realities.

This is a permanent, full-time position based in our Brisbane CBD head office. This position is in-office; however, it allows for ad hoc working from home.

Key Responsibilities

• Ensure software compliance across RPMGlobal's software portfolio and provide leadership on software security and compliance best practice.
• Manage open-source software governance, licensing obligations, and third-party software compliance
• Assess vulnerabilities identified through SAST, SCA, IAST, DAST and any other related security testing activities and provide remediation guidance to development teams
• Maintain software compliance evidence and support audit readiness activities
• Contribute to the evolution of secure software development practices and development standards
• Support ISO 9001 processes aligned with ISO 27001 and corporate security requirements
• Assist with security awareness, developer training initiatives, and continuous improvement activities

About You

• Minimum 3 years' experience in a software product organisation delivering commercial software products to external customers.
• Demonstrated experience in software security, application security, software assurance, secure software development, or software compliance
• Experience assessing software vulnerabilities and advising on practical risk-based remediation approaches
• Experience with SAST, SCA, IAST, and DAST dependency analysis and vulnerability management platforms
• Knowledge of OWASP application security practices and secure design principles
• Ability to balance security requirements with business and product delivery objectives
• Strong command of the English language in both verbal and written form.
• Eligible to work in Australia.

Highly Regarded Experience

• Professional certifications such as CSSLP, CISSP, Security+, or equivalent industry qualifications
• Understanding of open-source licensing and software component governance
• Demonstrated success supporting commercial software products through customer security reviews, audits, penetration testing remediation, and enterprise compliance assessments.
• Practical experience applying OWASP application security standards and secure design principles to improve software security outcomes.

About RPM

RPMGlobal is the mining industry’s leading enterprise technology and training provider and has been at the forefront of change and innovation in the mining industry for over 50 years.

We advance the mining industry towards a safer, more efficient, and more sustainable future through the delivery of innovative software solutions and deep domain mining expertise. Guided by our underlying principles of mining expertise, innovation, and sustainability, we strive to create safer and more efficient operations for our mining customers.

Our focus on providing advanced mining enterprise technology and training across the mining lifecycle enables us to guide customers through the industry's current and emerging challenges worldwide. This includes helping them meet the shift in social norms and consumer and investor ESG-related expectations.