Security & Compliance Officer

Job Description

\n

\n
• Staff benefits including 5 weeks leave and Salary Packaging
\n
• We are committed to your success and will support you
\n

About the opportunity \n

We are seeking a full-time, permanent Technical Security and Compliance Officer to coordinate cybersecurity governance, risk, compliance, assurance and improvement across internal teams and our managed service provider.

\n

You will translate organisational risks, regulatory obligations and business needs into a prioritised roadmap with clear owners, milestones, evidence and treatment actions. As a key contact for auditors, partners and stakeholders, you will provide clear reporting, prompt follow-up and audit-ready evidence.

Tasks include \n

\n
• Maintain the security and compliance roadmap, remediation backlog, priorities, dependencies, owners, target dates and delivery status with ICT leadership.
\n
• Coordinate security audits and assurance, including evidence validation, secure sharing, stakeholder follow-up, and tracking findings and actions to closure.
\n
• Test and report on assigned controls across Microsoft 365, identity, endpoint, application and data environments; work with control owners and the MSP to remediate gaps and verify closure.
\n
• Maintain and exercise incident response and disaster recovery playbooks, contacts, escalation paths and communications; coordinate post‑incident reviews and close corrective actions.
\n
• Maintain security policies, standards, control documentation, risk and exception registers, compliance obligations and governance reporting.
\n
• Coordinate security risk assessments for projects, suppliers and material technology changes, and support organisation‑wide security awareness and compliance.
\n

Role requirements \n

\n
• Experience in cybersecurity governance, risk, compliance, control assurance, audit coordination and technology risk management; security product or control portfolio experience is desirable.
\n
• Knowledge of the ASD Essential Eight, security frameworks, access governance, privacy, risk and audit evidence, and the ability to convert requirements into testable controls.
\n
• Experience coordinating internal teams, managed service providers, auditors and specialist vendors to deliver security outcomes.
\n
• Knowledge of Microsoft 365 security and compliance, including identity, privileged access, endpoints, data protection, logging, monitoring and reporting.
\n
• Strong documentation, analysis, prioritisation and communication skills, with the ability to translate technical risks into practical business actions.
\n
• Relevant qualifications or certifications in cybersecurity, IT, risk, audit or compliance are desirable.
\n
• The successful candidate must meet all role‑specific pre‑employment screening and probity requirements.
\n
• Flexible Work: A mix of office, community and remote work.
\n
• Salary Packaging: $15,900 plus $2,650 for entertainment through not‑for‑profit salary packaging.
\n
• Parental Leave: 14 weeks’ paid maternity leave.
\n
• Learning Support: Ten days’ development leave plus a $1,000 allowance.
\n
• Wellness: Fitness Passport, reduced health and general insurance, and Perkbox discounts.
\n
• Professional Support: Access to clinical services colleagues across NSW, QLD and ACT, with peer supervision.
\n
• Accessibility and Wellbeing: Tailored adjustments, flexible options, a psychologically safe workplace and staff networks.
\n

Diversity and Inclusion Statement \n

Northcott actively promotes diversity and inclusion in the recruitment process and throughout employment. We are committed to providing a workplace where every person is valued, respected and supported to progress. Northcott welcomes applications from and ensures no one is disadvantaged on the basis of their Aboriginal and Torres Strait Islander identity, culture, LGBTQIA+ identity, neurodivergence, disability, gender, age, religion or caring responsibilities. We welcome bilingual and multilingual applicants, recognising the important role language and cultural understanding play in connecting with and supporting our diverse communities. If you require any adjustments to participate in the recruitment process, have a preferred contact method, or need information provided in an alternative format, please contact recruitment at We are here to support you — reasonable adjustments are available throughout the application process and are also available to employees in their roles beyond recruitment.

\n

#J-18808-Ljbffr