📋 Description

• Own security risk. Maintain the risk register, run risk assessments on new products and features
• Own our compliance programme. Run SOC 2, ISO/IEC 27001 and ISO/IEC 42001 certification and
• Be the technical voice in enterprise deals. Handle security questionnaires, customer trust reviews
• Automate the boring parts. Build and improve tooling that collects evidence, monitors control drift
• Grow into hands-on security engineering. Pick up detection and response tooling, cloud security
• Set the standard for AI governance. Define how we assess, document and control AI systems, model

🎯 Requirements

• Deep GRC experience. You have run compliance programmes against SOC 2 and ISO/IEC 27001 in a
• Comfortable with AI compliance, or hungry to own it. Familiarity with ISO/IEC 42001 and emerging AI
• Technical credibility. You can hold your own with engineers on cloud architecture and security
• Wants to build, not just assess. You are looking for a role where the natural answer to a manual
• Enterprise fluency. You have been across the table from large customers, their procurement teams
• You are pragmatic and flexible. Like your new teammates, you are used to doing what is necessary to

🎁 Benefits

• Equity for everyone. Competitive base salary plus options, so every builder is aligned on long-term
• A place to do your best work, wherever you are. Our Sydney office is built for in-person first
• Built in connection. Join a Doveclub, bond with your team regularly, and celebrate the small wins
• Learn and thrive. Flexible L&D and wellness benefits, choose between a generous $3000 L&D
• Time to recharge. Four weeks of accrued leave, floating public holidays, and gifted bonus Kit Kat
• Four weeks from anywhere. Up to four weeks a year doing your job from anywhere in the world. Split