What you’ll do

• Develop and maintain in depth understanding of the Commercial segment’s processes, systems, technologies, data, customers, consumers, partners.

• Act as the primary local security contact / advisor for key stakeholders within the Commercial segment.

• Advise Security Leadership in decision making for and affecting the Commercial segment.

• Analyse and manage security compliance requirements based on industry standards, national and international regulatory framework and internal policy framework.

• Proactively identify non-conformities and areas of potential improvement and facilitate development of pragmatic solutions to address issues, utilizing the security assessments and observations processes.

• Engage with clients and customers as needed to assist the business to achieve its objectives with pre and post sales activities (e.g. explain our security program, support external audits, support bids/RFP process, assist in customer communication of security incident, etc).

• Participate in BU related conferences, client facing engagement, industry forums to represent the Security program.

• Provide regular and timely reporting on the status of information security across the Commercial segment.

What experience you need 

• 5+ years experience within the security industry.

• Bachelor’s degree or an equivalent combination of education and experience required.

• Strong communication and presentation skills demonstrated by your experience in presenting and communicating at all levels within the organization and senior management. An ability to translate complex technical security concepts into business-friendly communications, especially covering cloud usage.

• Ability to independently influence others in order to achieve objectives.

• Ability to work collaboratively within a team as well as independently and autonomously, and engage stakeholders as required, to own and carry on end-to-end projects and initiatives.

• Strong ability to build and maintain trusting relationships with internal and external customers and

• always demonstrate good judgment, integrity and actively collaborates and commits to the success of others.

• Knowledge and experience of Information Security Risk and Security governance.

• A solid understanding of security best practices and international standards such as ISO2700 and PCI DSS and NIST.

• Demonstrable experience of driving operational implementation of policies and processes.  

  What could set you apart

• Previous experience as a Business Information Security Officer (BISO).

• Experience working in a matrix environment with globally diverse team members.

• Experience with Google Cloud (GCP).

• Previous experience working with external clients.

• Experience participating in IT Security audits, working with auditors..

• Experience obtaining or maintaining compliance certifications such as SOC2, PCI, ISO 27001.

• Understanding of cyber risks in the banking/ financial services sector.

• CISM, CISSP or related certification is a strong plus.

Primary Location:

Function:

Schedule:

Our Company

Changing the world through digital experiences is what Adobe’s all about. We give everyone—from emerging artists to global brands—everything they need to design and deliver exceptional digital experiences! We’re passionate about empowering people to create beautiful and powerful images, videos, and apps, and transform how companies interact with customers across every screen. 

We’re on a mission to hire the very best and are committed to creating exceptional employee experiences where everyone is respected and has access to equal opportunity. We realize that new ideas can come from everywhere in the organization, and we know the next big idea could be yours!

Creativity for All

Adobe is a place where exceptional people work – don’t just take our word for it, our employees have recently voted us #1 on the Great Place to Work list for the 10th consecutive year!

We’re proud to offer market leading employee benefits designed to suit your lifestyle. Some of the great benefits include health insurance, global days off, wellness fund, market-leading parental leave, access to our Employee Stock Purchase Program and programs designed to help continue to build your career.

We also proudly empower our employees to get involved with corporate social responsibility and offer a broad range of opportunities to make a bigger impact through philanthropy, employee, and community engagement.

We know that people are the differentiator in our business, and that's why we want to meet you.

A bit more about you

In the role of Security Compliance Specialist, Tech GRC you will be part of a critical hub for Sales, Legal, Engineering, Compliance, Operation, and Marketing teams in presenting Adobe's security posture and overcoming customer security objections and concerns.

Are you interested in leading Security Compliance efforts, seeing how the business works up close, and chipping in to ensure sales go through optimally for a product-based organization? Do you have experience in driving Information Security assessments internally or externally and talking with customers? Then this role is for you.

In this role you’ll be focusing on driving Australian Security Compliances as part of the APAC Security Compliance Program by collaborating with external assessors, government agencies, product development & operations teams, core security teams, and others. This job also blends an understanding of information security with evangelism, program management, business savvy, and an eye for detail with timely execution.

What you’ll do

• Perform the IRAP Readiness Assessment covering various cybersecurity guidelines of the Information Security Manual (ISM) for products looking for IRAP assessment.
• Present Readiness Assessment result reports to summarize the compliance objectives, key findings, and next steps to Partners and Management regularly.
• Coordinate with relevant partners to remediate key findings and prepare the products for external IRAP assessment.
• Oversight development of System Security Plan (SSP) documents for in-scope products.
• Continuously evaluate and drive upgrades of operational policies, procedures, and standard processes to meet ISM requirements.
• Review and coordinate Cloud Controls Matrix (CCM) updates and IRAP Cloud Security Assessment Report (IRAP Report) with assessors.

What you need to succeed

• Bachelor/Master degree or equivalent experience in Information Security/Cyber Security or related field.
• Minimum 5-8 years of related security compliance assessments, IT/Cloud auditing, and control testing experience.
• Must know Security Compliance frameworks (e.g. IRAP, Cyber Essential Eights, ISO, SOC 2, etc.)
• Sound knowledge of Cloud IT processes and Cloud IT infrastructure like AWS, Azure, GCP, etc.
• Hold certifications like CISA, IRAP Assessor, and others.
• Good interpersonal and highly developed communication skills

At Adobe, you will be immersed in an exceptional work environment that is recognized throughout the world on Best Companies lists. You will also be surrounded by colleagues who are committed to helping each other grow through our unique Check-In approach where ongoing feedback flows freely.

If you’re looking to make an impact, Adobe's the place for you. Discover what our employees are saying about their career experiences on the Adobe Life blog and explore the meaningful benefits we offer.

Adobe is an equal opportunity employer. We welcome and encourage diversity in the workplace regardless of gender, race or color, ethnicity or national origin, age, disability, religion, sexual orientation, gender identity or expression, or veteran status.

Adobe is proud to be an Equal Employment Opportunity and affirmative action employer. We do not discriminate based on gender, race or color, ethnicity or national origin, age, disability, religion, sexual orientation, gender identity or expression, veteran status, or any other applicable characteristics protected by law. Learn more.
 

Adobe aims to make Adobe.com accessible to any and all users. If you have a disability or special need that requires accommodation to navigate our website or complete the application process, email accommodations@adobe.com or call (408) 536-3015.

Adobe values a free and open marketplace for all employees and has policies in place to ensure that we do not enter into illegal agreements with other companies to not recruit or hire each other’s employees.

The Cyber Security team provides governance, audit, control, and operational Cyber Security capabilities to support business and operational objectives of Nine group. Minimising friction and managing appropriate risk are key tenets of the team.  The Security team works closely with the Security Cloud Practice, Product Engineering, Network and Infrastructure and Services teams to collaboratively manage cyber controls.

The Cybersecurity Education and Change Lead plays a critical role in ensuring Nine’’s cybersecurity posture is robust by leading the development and implementation of comprehensive training programs and facilitating a culture of security awareness and compliance. This role combines expertise in cybersecurity with effective change management strategies to enhance Nine’'s ability to protect sensitive information and mitigate cyber threats.

Key accountabilities of this role is to: 

• Develop and maintain cyber security training curriculum that aligns with best practices, regulatory requirements and Nine’s business needs

• Create training materials, including e-learning modules, manuals, and workshops to educate employees on cybersecurity concepts, policies and procedures

• Collaborate with subject matter experts to ensure training content remains current and relevant

• Plan and conduct cybersecurity training sessions, workshops, and awareness programs for employees at various levels

• Manage red and purple team penetration test exercises and supplier management

• Utilise a variety of training methods, such as in-person sessions, webinars, and online courses, to engage and educate employees

• Evaluate the effectiveness of training programs through assessments, feedback, and performance metrics

• Develop and implement a cybersecurity change management strategy to promote a culture of security awareness and compliance.

• Work closely with key stakeholders to identify and address barriers to cybersecurity adoption and adherence to policies

You will be guiding the technical development of our game security measures, protecting the game client from hacks and exploits, hardening the code and data running on the player’s PC, and developing a secure infrastructure and server ecosystem for our players. You will be the technical leader, driving a team holding the player’s connected experience as the core of its mission, ensuring that players compete on a level playing field.

WHAT YOU'LL DO

• Secure the game client and its interactions with the game servers
• Collaborate with the networking team to harden and optimize network traffic
• Investigate exploits and cheats happening in our game and others
• Guide engineers to develop world class security systems and practices
• Educate content creators and gameplay engineers on how to maximize game security
• Coordinate with the production team, curating the security roadmap and direction
• Maintain and extend documentation on security best practices

Keeping out the cheaters and making the game environment fair for everyone is an important and a rewarding struggle. We want to give people the chance to show off their skills without having to contend with players running aimbots.

We are looking for a Gameplay Security Engineer to work with us on XDefiant, a new multiplatform online multiplayer action game. The game is a free-to-play, fast-paced arena shooter that combines intense combat with personalized loadouts and specialized factions, as teams battle for domination.

You’ll be working to make the game client and servers are as secure as possible, so we can ensure that our users get the best, fairest game experience possible. Working to make sure the game server data is secure and validated, blocking game exploits, and helping create the best possible play environment. You will work with a small, collaboration-oriented team where you will have the opportunity to contribute in meaningful ways. 

­­WHAT YOU'LL DO

• Analyze the game ecosystem for exploits
• Ensure that server logic and server-client interactions are secure and validated
• Work together with the networking team to harden and optimize network traffic
• Maintain and extend documentation on gameplay security best practices
• Self-manage programming task schedule updates and collaborate with production team
• Ensure that your code meets the team's coding standards to deliver high quality and maintainable code 

Join the team redefining how the world experiences design.

Hey, g'day, mabuhay, kia ora,你好, hallo, vítejte!

Thanks for stopping by. We know job hunting can be a little time consuming and you're probably keen to find out what's on offer, so we'll get straight to the point. 

Where and how you can work

Our flagship campus is in Sydney. We also have a campus in Melbourne and co-working spaces in Brisbane, Perth and Adelaide. But you have choice in where and how you work. That means if you want to do your thing in the office (if you're near one), at home or a bit of both, it's up to you. 

What you’d be doing in this role

As Canva scales change continues to be part of our DNA. But we like to think that's all part of the fun. So this will give you the flavor of the type of things you'll be working on when you start, but this will likely evolve.

About Senior Security Engineers 

At Canva, we’re all constantly striving towards our Crazy Big Goals! As the features and services of our product suite evolve, we’re setting some large and ambitious goals. We need to be able to ship robust and secure features without sacrificing speed and scale of delivery, which is where our Application Security team comes in. 

As a Senior Security Engineer within our Application Security team, your primary objective is to safeguard Canva's products and features by proactively identifying and eliminating vulnerabilities. You play a crucial role in ensuring the security of our Community by providing guidance and support to engineering teams in identifying and resolving security issues as they arise.

About the Security Group

The Security Group is responsible for protecting Canva systems and data from information security threats. Our teams work together, and with other groups, to deliver preventive and detective controls and processes that reduce security risk.

The group runs programs across Identity and Access Management, Application Security, Risk Management, and Threat Detection and Response domains.  

What you'll be doing: 

• Identifying, introducing, and improving security controls in Canva’s compute, platform engineering, and cloud infrastructure disciplines.
• Advising infrastructure engineers on cloud platform security best practices and design patterns.
• Leading threat modeling exercises for new and complex architectures and features.
• Designing and developing tools, libraries and services that support Canva engineers in building secure software.
• Evaluating new and emerging security technologies that make it easier to reliably maintain platform and infrastructure security.
• Discovery and triage of vulnerabilities across Canva’s threat landscape.
• Assisting your team in interviewing and hiring other talented security engineers.
• Mentoring and supporting the growth of your colleagues in your areas of expertise.

Required Experience:

• Experience with Infrastructure-centric Secure Design Review and Assessment, including Risk Assessment and Threat Modeling process.
• Previous experience working with engineering teams to audit and remediate issues within the DevOps ecosystem (e.g. Continuous Delivery, Continuous Integration, Infrastructure as Code).
• Subject-matter expertise of Amazon Web Services and Secure public cloud architectures, including services within the AWS ecosystem.
• Previous hands-on experience with infrastructure tooling and orchestration platforms, including Terraform, Docker, K8s, EKS/ECS and similar.
• Hands-On Experience with CI/CD platforms, such as Buildkite, Jenkins, Flux, ArgoCD, or similar.
• Proficient with one or more modern program languages (Golang, Python or Java preferred).
• Experience leading projects end-to-end whilst balancing requirements from multiple partners, and mentoring Security Engineers.
• Excellent written and verbal communication skills; with the ability to work with a range of Canvanauts from different backgrounds, with different expertise, and with different professional and personal needs.

Beneficial Experience (not required, but helpful):

• Experience building and deploying tooling in support of Containerized Workloads.
• Hands-On Experience  Auditing K8s/EKS configurations, including Network Policies, Manifests, Container Images, Image Registries, Dockerfiles, etc.
• Proven understanding of Secrets Management platforms as well as Secrets Management Patterns in Orchestrated Environments.
• Experience with ISO27001 Preparedness and Auditing.

What's in it for you?

Achieving our crazy big goals motivates us to work hard - and we do - but you'll experience lots of moments of magic, connectivity and fun woven throughout life at Canva, too. We also offer a stack of benefits to set you up for every success in and outside of work.

Here's a taste of what's on offer:

• Equity packages - we want our success to be yours too
• Inclusive parental leave policy that supports all parents & carers
• An annual Vibe & Thrive allowance to support your wellbeing, social connection, office setup & more
• Flexible leave options that empower you to be a force for good, take time to recharge and supports you personally

Check out lifeatcanva.com for more info.

Other stuff to know

We make hiring decisions based on your experience, skills and passion, as well as how you can enhance Canva and our culture. When you apply, please tell us the pronouns you use and any reasonable adjustments you may need during the interview process.

Please note that interviews are conducted virtually. 

•        We're changing the game!
•        We're doing big things, and we can't do it alone.
•        We're part of a big ecosystem, and we know teamwork and passion for our purpose is what will make us successful.

AP+ bring together Australia’s three domestic payment organisations into one integrated entity. Operating in the public interest, AP+ focuses on meeting the needs of all payment users and representing the views of a diverse range of stakeholders. BPAY Group, eftpos and NPP Australia continue to operate as distinct brands within a Group Leadership Team structure.

AP+ is intended to create a more efficient and agile payments group, building the competitiveness of Australian domestic payments infrastructure, and delivering significant benefits to Australian consumers and businesses.

Role purpose

• To bring a targeted and disciplined approach to security monitoring and testing, identifying risks, and providing reporting to the technical administrators as well as the business department heads 
• The role works within the Security function, so would require someone who is proactive and analytical with a curious mindset, who can understand and derive data from a number of sources and report on the findings in a number of formats.

Key Responsibilities

• Maintain security monitoring through a range of tools within AP+ such as Qualys, Splunk, Darktrace, Crowdstrike, AWS, Microsoft and others to proactively monitor the security of the environments.
• Being able to analyse, interpret and utilise data to add value to the security function in being proactive on what/why/how trends occur, and present the findings for the head of security to report to the business leaders. 
• Utilising a wide range of tools and work with the security team to automate a range of reports to provide trending and business risk analysis. 
• Understand and keep up to date with the latest news or updates on cyber security and feed that information into the reporting. 
• Work within the security team to promote cyber awareness across the business.

Key Challenges

• Absorb data and produce meaningful and business digestible reports.
• Key scripting or programming knowledge to perform data analysis.
• Strong communications skills particularly in report writing.
• Understand a large data set and derive actionable information from it 
• Gathering and utilising data from numerous tools 
• Upskill in programming languages, ideally Python to automate large workloads. 
• Strong excel, powerpoint skills to present data to a business audience. 
• PowerBI or other data analytic tool skills ideal

• Relevant certifications or equivalent experience in information technology, computer science or a related discipline.
• At least 2-3 year’s experience in an IT role working with technologies.
• Strong data analysis and cyber security knowledge.
• Python or similar data programming , strong excel skills for data management, strong PowerBI or other data analysis tools.
• Strong MS office skills beyond basic usage.
• Strong verbal and written ability.
• Exceptional report writing skills.
• Strong analytical skills and problem solving ability.

We know applying for a role can be a nerve-wracking experience, so we endeavor to review applications and plan to schedule screening interviews within the next two weeks. If you are among selected candidates, we’ll be in touch to schedule a phone interview. In any case, we will keep you posted on the status of your application.

We want to remove all barriers to inclusion so if you need advice or support with your application, we’re here to help. Please reach out to [email protected]. We also encourage you to let us know your pronouns at any point during the recruitment process.

*AP+ are not working with Recruitment Agencies for this role.