Security Compliance Manager

As Security Compliance Manager, Australia based in our HQ in Sydney or Melbourne, you will report to the Security Operations Senior Manager and work closely with various teams and leadership across the Asia Pacific region. Build a strong security culture in Australia and other designated locations by advising on security government compliance and incorporating those requirements into global and local security standards. Act as the primary Security Officer under the Defence Industry Security Program (DISP), including the sponsorship of AirTrunk staff and contractors. Play a key role in developing physical security policy, training, and awareness programs to embed a strong security culture.

Responsibilities

Act as the primary Security Officer for the Defence Industry Security Program (DISP), ensuring compliance with membership, governance, and reporting obligations; Interpret, implement, and maintain compliance with Australian Government security frameworks, including PSPF, DSPF, SOCI and the Hosting Certification Framework (HCF); Lead security threat, vulnerability, and risk assessments across all AirTrunk sites, driving risk treatment and continuous improvement; Establish and manage security governance, risk, and compliance frameworks for government facing and regulated operations; Conduct security audits and assurance activities against AirTrunk, government, and customer standards, including penetration testing programs; Develop, review, and maintain security policies, standards, procedures, plans, and training materials aligned with regulatory and certification requirements; Design and deliver security awareness, induction, and role based training; mentor and coach site and corporate security teams; Support internal and external audits, certifications, and inspections by preparing documentation, evidence, and remediation plans; Liaise with customers and internal stakeholder to understand and document AirTrunk customer government security requirements; Monitor changes to government security policy and regulatory requirements and translate impacts into actionable outcomes

Requirements

Demonstrated experience in protective security, government risk, compliance, or assurance roles within Australian government or regulated environments; Current NV1 security clearance, or the ability to obtain and maintain NV1 clearance; Proven experience acting as, or the capability to act as, a DISP Security Officer; Strong working knowledge of the Protective Security Policy Framework (PSPF), Defence Security Principles Framework (DSPF), and the Australian Government Hosting Certification Framework (HCF); Experience supporting or managing government certification, assurance, or regulated compliance frameworks; Proven capability in developing and maintaining security policies, standards, and governance documentation; Demonstrated experience in creating and delivering security training, awareness initiatives, and learning packages; Strong stakeholder engagement, collaboration, and influencing skills; High standards of integrity, discretion, and professional judgement; Ability to work autonomously while contributing effectively within a collaborative environment; Experience influencing security teams, management, and contractors; Ability and flexibility to travel across Australia and as required to other locations across APJ region