Software Compliance Officer

RPMGlobal; Brisbane; Hybrid; AUD 110,000 - 170,000; Full time

Job summary

RPMGlobal is seeking a Software Compliance Officer to join our Technology team in Brisbane. You will lead software security, licensing compliance, and vulnerability management across a large development environment, embedding security and compliance throughout the SDLC.

You will collaborate with engineers, architects, product teams and stakeholders to balance risk with business needs, improving secure design and practices while supporting ISO 9001/ISO 27001 processes.

Qualifications

• Minimum 3 years' experience in a software product organisation delivering commercial software products to external customers.
• Experience in software security, application security, software assurance, secure software development, or software compliance.
• Experience with SAST, SCA, IAST, and DAST dependency analysis and vulnerability management platforms.
• Knowledge of OWASP application security practices and secure design principles.
• Ability to balance security requirements with business and product delivery objectives.
• Strong command of the English language in both verbal and written form.
• Eligible to work in Australia.

Responsibilities

• Ensure software compliance across RPMGlobal's software portfolio and provide leadership on software security and compliance best practice.
• Manage open-source software governance, licensing obligations, and third-party software compliance.
• Assess vulnerabilities identified through SAST, SCA, IAST, DAST and any other related security testing activities and provide remediation guidance to development teams.
• Maintain software compliance evidence and support audit readiness activities.
• Contribute to the evolution of secure software development practices and development standards.
• Support ISO 9001 processes aligned with ISO 27001 and corporate security requirements.
• Assist with security awareness, developer training initiatives, and continuous improvement activities.

Skills

Software security

Application security

Software assurance

Secure software development

Software compliance

Risk-based remediation

Vulnerability management

Tools

SAST

SCA

IAST

DAST

Job description

About the Role

RPMGlobal (RPM) is seeking a Software Compliance Officer to join our Technology team. The role will work across a large software development environment, helping product teams strengthen software security, manage compliance obligations and maintain customer trust.

Working across multiple product teams, the Software Compliance Officer will provide technical leadership in software security, licensing compliance, secure development practices, and vulnerability management. The role works closely with software engineers, architects, product teams, and business stakeholders to embed security and compliance requirements throughout the software development lifecycle.

This is an opportunity for a technically minded professional who enjoys working across teams, influencing outcomes, and improving the way software is designed, built, tested and released. The role combines practical application security expertise with the ability to balance risk, business outcomes, and engineering realities.

This is a permanent, full-time position based in our Brisbane CBD head office. This position is in-office; however, it allows for ad hoc working from home.

Key Responsibilities

• Ensure software compliance across RPMGlobal's software portfolio and provide leadership on software security and compliance best practice.
• Manage open-source software governance, licensing obligations, and third-party software compliance
• Assess vulnerabilities identified through SAST, SCA, IAST, DAST and any other related security testing activities and provide remediation guidance to development teams
• Maintain software compliance evidence and support audit readiness activities
• Contribute to the evolution of secure software development practices and development standards
• Support ISO 9001 processes aligned with ISO 27001 and corporate security requirements
• Assist with security awareness, developer training initiatives, and continuous improvement activities

About You

• Minimum 3 years' experience in a software product organisation delivering commercial software products to external customers.
• Demonstrated experience in software security, application security, software assurance, secure software development, or software compliance
• Experience assessing software vulnerabilities and advising on practical risk-based remediation approaches
• Experience with SAST, SCA, IAST, and DAST dependency analysis and vulnerability management platforms
• Knowledge of OWASP application security practices and secure design principles
• Ability to balance security requirements with business and product delivery objectives
• Strong command of the English language in both verbal and written form.
• Eligible to work in Australia.

Highly Regarded Experience

• Professional certifications such as CSSLP, CISSP, Security+, or equivalent industry qualifications
• Understanding of open-source licensing and software component governance
• Demonstrated success supporting commercial software products through customer security reviews, audits, penetration testing remediation, and enterprise compliance assessments.
• Practical experience applying OWASP application security standards and secure design principles to improve software security outcomes.

About RPM

RPMGlobal is the mining industry's leading enterprise technology and training provider and has been at the forefront of change and innovation in the mining industry for over 50 years.

We advance the mining industry towards a safer, more efficient, and more sustainable future through the delivery of innovative software solutions and deep domain mining expertise. Guided by our underlying principles of mining expertise, innovation, and sustainability, we strive to create safer and more efficient operations for our mining customers.

Our focus on providing advanced mining enterprise technology and training across the mining lifecycle enables us to guide customers through the industry's current and emerging challenges worldwide. This includes helping them meet the shift in social norms and consumer and investor ESG-related expectations.