Team Overview:

The AppSec Team focuses on building secure mobile, web and cloud applications throughout their development lifecycle, from start to finish. AppSec is a proactive approach to security that help prevents threats at the initial stages rather than a reactive approach.

As an Application Security Engineer at TAL, you will be responsible for ensuring the security of our applications by implementing and maintaining robust security measures at TAL. You will work closely with development teams to identify and mitigate security vulnerabilities throughout the software development lifecycle. You will also foster security awareness and DevSecOps culture, providing security training to development teams.

Key Responsibilities:

• Ascertain a holistic understanding of TAL’s systems, development workloads and lifecycles.
• Create and update software application security policies and procedures.
• Work closely with the TAL Cyber team to implement security best practices and standards to protect sensitive data and ensure compliance with regulations.
• Collaborate with development teams to integrate security controls into the software development process.
• Conduct security assessments on applications to identify and remediate vulnerabilities.
• Drive response to security incidents, conducting root cause analysis and implementing corrective actions.
• Analyse application code and recommend solutions to identified security issues.
• Execute planned and ad-hoc security scans of software applications, and interpret results for development teams.
• Maintain documentation related to application security processes and controls.
• Providing application security guidance, coaching, and training to development teams and other stakeholders.
• Ensuring the adoption and implementation of application security tools in the DevSecOps lifecycle.
• Gather, manipulate and report on data from application security tools programmatically.
• Work with vendors to tailor application security tools to fit TAL workloads. 
• Stay up-to-date on the latest security threats and trends to proactively address potential risks and educate development teams.

What you’ll do

• Develop and maintain in depth understanding of the Commercial segment’s processes, systems, technologies, data, customers, consumers, partners.

• Act as the primary local security contact / advisor for key stakeholders within the Commercial segment.

• Advise Security Leadership in decision making for and affecting the Commercial segment.

• Analyse and manage security compliance requirements based on industry standards, national and international regulatory framework and internal policy framework.

• Proactively identify non-conformities and areas of potential improvement and facilitate development of pragmatic solutions to address issues, utilizing the security assessments and observations processes.

• Engage with clients and customers as needed to assist the business to achieve its objectives with pre and post sales activities (e.g. explain our security program, support external audits, support bids/RFP process, assist in customer communication of security incident, etc).

• Participate in BU related conferences, client facing engagement, industry forums to represent the Security program.

• Provide regular and timely reporting on the status of information security across the Commercial segment.

What experience you need 

• 5+ years experience within the security industry.

• Bachelor’s degree or an equivalent combination of education and experience required.

• Strong communication and presentation skills demonstrated by your experience in presenting and communicating at all levels within the organization and senior management. An ability to translate complex technical security concepts into business-friendly communications, especially covering cloud usage.

• Ability to independently influence others in order to achieve objectives.

• Ability to work collaboratively within a team as well as independently and autonomously, and engage stakeholders as required, to own and carry on end-to-end projects and initiatives.

• Strong ability to build and maintain trusting relationships with internal and external customers and

• always demonstrate good judgment, integrity and actively collaborates and commits to the success of others.

• Knowledge and experience of Information Security Risk and Security governance.

• A solid understanding of security best practices and international standards such as ISO2700 and PCI DSS and NIST.

• Demonstrable experience of driving operational implementation of policies and processes.  

  What could set you apart

• Previous experience as a Business Information Security Officer (BISO).

• Experience working in a matrix environment with globally diverse team members.

• Experience with Google Cloud (GCP).

• Previous experience working with external clients.

• Experience participating in IT Security audits, working with auditors..

• Experience obtaining or maintaining compliance certifications such as SOC2, PCI, ISO 27001.

• Understanding of cyber risks in the banking/ financial services sector.

• CISM, CISSP or related certification is a strong plus.

Primary Location:

Function:

Schedule:

Our Company

Changing the world through digital experiences is what Adobe’s all about. We give everyone—from emerging artists to global brands—everything they need to design and deliver exceptional digital experiences! We’re passionate about empowering people to create beautiful and powerful images, videos, and apps, and transform how companies interact with customers across every screen. 

We’re on a mission to hire the very best and are committed to creating exceptional employee experiences where everyone is respected and has access to equal opportunity. We realize that new ideas can come from everywhere in the organization, and we know the next big idea could be yours!

Creativity for All

Adobe is a place where exceptional people work – don’t just take our word for it, our employees have recently voted us #1 on the Great Place to Work list for the 10th consecutive year!

We’re proud to offer market leading employee benefits designed to suit your lifestyle. Some of the great benefits include health insurance, global days off, wellness fund, market-leading parental leave, access to our Employee Stock Purchase Program and programs designed to help continue to build your career.

We also proudly empower our employees to get involved with corporate social responsibility and offer a broad range of opportunities to make a bigger impact through philanthropy, employee, and community engagement.

We know that people are the differentiator in our business, and that's why we want to meet you.

A bit more about you

In the role of Security Compliance Specialist, Tech GRC you will be part of a critical hub for Sales, Legal, Engineering, Compliance, Operation, and Marketing teams in presenting Adobe's security posture and overcoming customer security objections and concerns.

Are you interested in leading Security Compliance efforts, seeing how the business works up close, and chipping in to ensure sales go through optimally for a product-based organization? Do you have experience in driving Information Security assessments internally or externally and talking with customers? Then this role is for you.

In this role you’ll be focusing on driving Australian Security Compliances as part of the APAC Security Compliance Program by collaborating with external assessors, government agencies, product development & operations teams, core security teams, and others. This job also blends an understanding of information security with evangelism, program management, business savvy, and an eye for detail with timely execution.

What you’ll do

• Perform the IRAP Readiness Assessment covering various cybersecurity guidelines of the Information Security Manual (ISM) for products looking for IRAP assessment.
• Present Readiness Assessment result reports to summarize the compliance objectives, key findings, and next steps to Partners and Management regularly.
• Coordinate with relevant partners to remediate key findings and prepare the products for external IRAP assessment.
• Oversight development of System Security Plan (SSP) documents for in-scope products.
• Continuously evaluate and drive upgrades of operational policies, procedures, and standard processes to meet ISM requirements.
• Review and coordinate Cloud Controls Matrix (CCM) updates and IRAP Cloud Security Assessment Report (IRAP Report) with assessors.

What you need to succeed

• Bachelor/Master degree or equivalent experience in Information Security/Cyber Security or related field.
• Minimum 5-8 years of related security compliance assessments, IT/Cloud auditing, and control testing experience.
• Must know Security Compliance frameworks (e.g. IRAP, Cyber Essential Eights, ISO, SOC 2, etc.)
• Sound knowledge of Cloud IT processes and Cloud IT infrastructure like AWS, Azure, GCP, etc.
• Hold certifications like CISA, IRAP Assessor, and others.
• Good interpersonal and highly developed communication skills

At Adobe, you will be immersed in an exceptional work environment that is recognized throughout the world on Best Companies lists. You will also be surrounded by colleagues who are committed to helping each other grow through our unique Check-In approach where ongoing feedback flows freely.

If you’re looking to make an impact, Adobe's the place for you. Discover what our employees are saying about their career experiences on the Adobe Life blog and explore the meaningful benefits we offer.

Adobe is an equal opportunity employer. We welcome and encourage diversity in the workplace regardless of gender, race or color, ethnicity or national origin, age, disability, religion, sexual orientation, gender identity or expression, or veteran status.

Adobe is proud to be an Equal Employment Opportunity and affirmative action employer. We do not discriminate based on gender, race or color, ethnicity or national origin, age, disability, religion, sexual orientation, gender identity or expression, veteran status, or any other applicable characteristics protected by law. Learn more.
 

Adobe aims to make Adobe.com accessible to any and all users. If you have a disability or special need that requires accommodation to navigate our website or complete the application process, email accommodations@adobe.com or call (408) 536-3015.

Adobe values a free and open marketplace for all employees and has policies in place to ensure that we do not enter into illegal agreements with other companies to not recruit or hire each other’s employees.

The Cyber Security team provides governance, audit, control, and operational Cyber Security capabilities to support business and operational objectives of Nine group. Minimising friction and managing appropriate risk are key tenets of the team.  The Security team works closely with the Security Cloud Practice, Product Engineering, Network and Infrastructure and Services teams to collaboratively manage cyber controls.

The Cybersecurity Education and Change Lead plays a critical role in ensuring Nine’’s cybersecurity posture is robust by leading the development and implementation of comprehensive training programs and facilitating a culture of security awareness and compliance. This role combines expertise in cybersecurity with effective change management strategies to enhance Nine’'s ability to protect sensitive information and mitigate cyber threats.

Key accountabilities of this role is to: 

• Develop and maintain cyber security training curriculum that aligns with best practices, regulatory requirements and Nine’s business needs

• Create training materials, including e-learning modules, manuals, and workshops to educate employees on cybersecurity concepts, policies and procedures

• Collaborate with subject matter experts to ensure training content remains current and relevant

• Plan and conduct cybersecurity training sessions, workshops, and awareness programs for employees at various levels

• Manage red and purple team penetration test exercises and supplier management

• Utilise a variety of training methods, such as in-person sessions, webinars, and online courses, to engage and educate employees

• Evaluate the effectiveness of training programs through assessments, feedback, and performance metrics

• Develop and implement a cybersecurity change management strategy to promote a culture of security awareness and compliance.

• Work closely with key stakeholders to identify and address barriers to cybersecurity adoption and adherence to policies

• Newly created position – A legal role designed to make an impact 
• Located on the fringe of the CBD, 5 minutes from Museum station - Full time permanent role 
• Advancement orientated ASX list technology company 
• Advancement opportunity - Join a team of senior and talented professionals that inspire and challenge you 

WHY JOIN OUR CLIENT?   

Our client is an Australian-based ASX listed communications and networking company with a vision to create secure, personalised remote connections for every user. It has received numerous industry awards for its technology, including being a worldwide winner of the Global Security Challenge. Headquartered in Sydney, our client has a presence globally including in Ireland, Japan, China, New Zealand, Thailand, Malaysia, the Philippines, Pakistan, UAE, Chile, USA and Europe. 

THE OPPORTUNITY 

Due to continued growth, we are now looking for a Senior Legal Counsel to join our client’s team. Reporting to the Executive (Legal and Compliance) this role is suited to senior lawyer looking to expand their career with aspirations to grow into a more senior internal role. The purpose of this new position is work with internal and external stakeholders to ensure achieves strong commercial outcomes and meets it’s legal and compliance requirements. The Senior Legal Counsel will work closely alongside COO, Risk, HR and CoSec functions and advise across all areas of the business to ensure it is proactively managing our legal risks and compliances effectively and manage any legal matters. 

Key aspects of the role include: 

• Drafting, negotiating, and reviewing commercial documents and contracts, or, where appropriate, arranging for external legal advice or review (including agreements with customers for sale of products and services, agency and broker agreements, leases, supplier and service provider agreements etc). 

Providing legal support and advice: 

• for establishment of new entities, alliances and joint ventures as required in Australia and internationally. 

• for obtaining relevant licences, permits and authorisations in Australia and internationally. 

• generally, across commercial matters, regulatory matters, internal policies and procedures. 

Assisting business (including sales and marketing, HR, operations and customer service, technology, finance and other business teams) with: 

• development of due diligence and contract management initiatives to ensure third-party vendors, suppliers, and partners meet compliance standards and do not pose undue risk to the business. 

• implementation and management of contract management systems to streamline contract workflows, track contract obligations, and manage risk 

• Assessment and mitigation of legal risks associated with supply chain management, vendor relationships, and outsourcing arrangements. 
• Managing litigation, disputes, claims, and regulatory investigations involving our client, including working with external counsel and representing our client in legal proceedings where relevant. 
• Managing and protecting our client intellectual property rights, including trademarks, copyrights, patents, and trade secrets. 
• Ensuring our client and relevant stakeholders are abreast of relevant laws and any applicable changes in the jurisdictions it operates within. 
• Advising on data privacy laws and regulations, developing privacy policies and procedures, and ensuring compliance with data protection requirements. 
• Assisting with the implementation of a robust compliance framework, including ongoing monitoring of compliance obligations. 
• Developing and maintaining Compliance Program in line with requirements of ASIC, ASX, telecommunications and other relevant regulators and in Australia and overseas.   
• Assist with internal policy reviews to ensure compliance with statutory and/or client requirements. 
• Reviewing promotional material produced by our client or any third party which promotes our client to ensure it complies with the promotional material legal requirements as set out by ASIC and legislation. 

WHAT YOU NEED TO SUCCEED 

We are looking for someone who thrives in a fast-paced growth environment. We are especially interested in candidates who possesses the ability to think commercially and are capable effectively managing stakeholders and competing priorities. If you are seeking a legal role which will shape the long-term success of a business, we want to hear from you. 

• Legal degree and holds a current legal practising certificate.   

• 7+ years of relevant legal experience. 
• Demonstrated success in successfully achieving exceptional legal outcomes for clients or organisations (where inhouse). 
• Effective written and verbal communicator and can create and deliver relevant content and presentations to internal and external stakeholders. 
• Natural drive with a self-starting attitude to consistently propel initiatives forward with determination and enthusiasm. 
• Manages professional relationships at all levels inside and outside the organisation, builds appropriate rapport, builds constructive and effective relationships to drive results. 
• Flexibility to adapt to changing priorities with the ability to prioritise work and focus on what is most important via effective stakeholder management. 
• A natural team player, and an active collaborator and contributor to the growing team to ensure we generate great innovative ideas together. 

 You can reach out to Celine Drogat at [email protected] if you have any questions about this role. Suitable candidates will be contacted for an initial phone call. 

PaidRight exists to restore trust between employers and employees when it comes to pay. We envision a world where employee payment compliance is a given and payroll data drives business optimisation.

We are a small, well funded company that services some of the biggest names in the country and are currently looking for people to join our exciting team.

What you will do: 

• Conduct high level reviews of industrial relations legislation and instruments, particularly modern awards and enterprise agreements 
• Ability to identify ambiguities in industrial instruments and translate to simple questions/understanding 
• Implement and maintain databases with relevant industrial relations regulatory changes, legal cases and court decisions
• Improve on processes and databases
• Create content for industrial relations updates for online distribution
• Host industrial relations introduction sessions for new employees 
• Collaborate across teams and assist understanding of industrial relation laws

• Bachelor of Law 
• 2 years experience 
• Proven ability to interpret and apply legislation
• Proactive and able to work independently as well as part of a team
• Excellent attention to detail 
• Excellent written and verbal communication skills

We are a young scale-up with plenty of space for career development. You will be given every opportunity to learn and grow in a fast paced, growing company. We like to be social by having team lunches, dinners and our quarterly strategy sessions usually involve great social and cultural events.

The Industry Marketing team is at the forefront of our company’s growth, helping the world to understand our unique value and its relevance by industry. We seek a passionate marketer who can define the best program of action to excite and mobilize Global Public Sector (GPS).  In this role, you will distill our platform and products into compelling value propositions that motivate audiences toward deeper engagement with ServiceNow. Your role in helping us to reimagine the future of work will require thought leadership, action-orientation, commitment to excellence and incredible teamwork. This individual contributor role reports to the Sr. Director, Industry Marketing.

 What you get to do in this role:

• Define ServiceNow’s value proposition for Global Public Sector, its Solutions and included set of products, globally; create the narratives for the key buying centers
• Help to fuel the growth of Global Public Sector by contributing to scale marketing and selling motions: optimize motions for Public Sector target personas, aligned to mission areas and solutions, sales maturity, market maturity and solution-market fit
• Provide input to compelling content across a variety of asset types (research, white papers, presentations, customer stories, e-books, etc.) and communication platforms ( .com, social, blogs, webinars, email, events, community and more)
• Partner with product management to articulate value propositions and amplify release-related deliverables; ensure alignment between product-level and industry-level messaging and taxonomy; ensure relevance of messaging to industry audiences
• Identify, validate and develop cross-organizational use cases for our products and solutions
• Provide field go-to-market enablement content based upon that team’s strategies for effective selling and value-based selling principles.  Relationships include linkages to Partner, Analyst and Client Advocacy teams
• Help drive scale efficiencies across ServiceNow: run communities of practice, participate in planning and interlock meetings, make process improvements, and generally mature the marketing functions upon which you have influence
• Collaborate with linked global marketing teams to create end-to-end marketing programs that drive scale and value, and which are designed with localization in mind (linked teams include campaigns and pipeline demand generation, regional and account-based marketing, public relations, internal communications and brand)
• Act as a spokesperson for ServiceNow solutions to internal and external audiences, including sales kickoff, sales training, executive briefing center, Knowledge, events, webinars, industry conferences, and analyst briefings
• Help support key conferences and regional events - including speaker selection, content reviews, and messaging support
• Help develop and deliver sales training content to improve funnel and sales performance