Impress employers and recruiters.
Choose from hundreds of resume examples.

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

As the Security & Compliance Engineer, you will be a key player in ensuring the technology environment is secure, well-managed, and compliant. You will own the technical implementation of controls across ASD Essential Eight ML2, NIST CSF 2.0, and ISO 27001:2022, maintaining evidence and audit readiness in the GRC platform.

Responsibilities

• Implement and validate controls across Essential Eight, ISO 27001:2022, and NIST CSF 2.0, keeping evidence current in the GRC platform.
• Administer EDR/MDR, application whitelisting, and vulnerability management tools, and harden endpoints in line with patching timeframes.
• Support identity and Zero Trust security (MFA, Conditional Access, Privileged Identity Management) across the multi-brand environment.
• Identify control gaps and cloud misconfigurations, and drive remediation with clear owners and timelines.
• Act as a key technical contact for internal audits and external assessments.
• Translate technical risk into clear, business-relevant reporting for leadership.

Requirements

• 4+ years in a hands-on security engineering or security analyst role.
• Demonstrable experience implementing ISO 27001 or Essential Eight controls (not just advisory).
• Proficiency with enterprise EDR, application whitelisting, and vulnerability management tooling.
• Strong cloud identity and access management experience (SSO, MFA, Conditional Access, Privileged Identity Management).
• Experience using a GRC platform for evidence management and compliance tracking.

Skills

• ASD Essential Eight ML2
• NIST CSF 2.0
• ISO 27001:2022
• GRC platform
• EDR/MDR
• Application whitelisting
• Vulnerability management
• Endpoint hardening
• Identity and Zero Trust security
• MFA
• Conditional Access
• Privileged Identity Management
• Cloud security
• SSO
• ITSM
• Project tracking tooling

Location

• Sydney CBD

Work Type

• Full-Time
• On-Site (5 Days)

Experience Level

• 4+ years

Education Level

• Tertiary qualification in Cyber Security, Information Technology, Computer Science or a related discipline (or equivalent industry experience)
• ISO 27001 Lead Implementer certification

Benefits

• Strong focus on wellbeing, growth, and inclusive culture
• Competitive rewards
• Recognition programs
• Lifestyle benefits

About the Company

• Founded in 2013 as Scape Australia, leaders in student housing, we've since grown into a vertically integrated living platform known as The Living Company.
• We manage $17B in assets across Student Living (Scape), Rent to Live – Affordable Housing (RTL Co.), and Retirement Living (Aveo), spanning site origination, investment, planning, design, development, construction, and operations.
• The Living Company is reshaping the way Australians live by delivering sustainable, community-driven, and high-quality spaces across the country.

Equal Opportunity

• At The Living Company, we honour and welcome the rich heritage and contributions of First Nations and Indigenous peoples.
• Our workplace embraces diversity and strives to create an inclusive environment that respects and values your culture, traditions, and perspectives.
• Join us in building a harmonious and empowered community where everyone's voice is heard and celebrated.