Skip to content

Open nowPosted 7 days ago

Compliance and Security Officer

KordaMentha34 open roles

Where
Canberra, ACT, Australia
Work mode
On site
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowCompliance and Security OfficerKordaMentha · Canberra, ACT, Australia
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on KordaMentha's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.9% of postings close within 7 days. Measured by our own scanner across the market. KordaMentha postings stay open a median of 20 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 13.9%7 days
  4. 22.4%14 days
  5. 38.1%30 days
  6. 59.0%60 days
This job: posted 7 days ago

KordaMentha median: 20 days open

The posting

Company Description

For more than 20 years, KordaMentha has supported businesses through some of their most complex matters and opportunities. Founder owned and led; we are an advisory firm that helps corporations, financiers, lawyers, private investors and government clients to grow, protect and recover value.

That’s what we do, but it’s how we do this that makes us who we are.

Proudly independent, strategically local, and with a bias for action to get things done, we focus on doing what is right by our clients, our people, and the wider community. Our track record shows that we help navigate the best path forward in challenging times, and do so across cities, regions and territories.

In the most stressful or demanding environments, we continue to drive change where it really counts.

Job Description

Due to growth within the firm, our Risk team are seeking a Compliance and Security Coordinator to lead and deliver compliance with ISO/IMS/ISMS across the firm.

Working as part of a collaborative and highly engaged function, the Risk team partners closely with a broad range of internal and external stakeholders to support strategic outcomes and business priorities. The team also oversees DISP‑aligned security governance, including personnel security, security awareness, incident management and protective security practices.

This role provides meaningful exposure to risk, compliance and security initiatives, offering opportunities to contribute to firmwide programs that directly support continuous improvement and long term business objectives.

Key Responsibilities:

  • Lead and maintain firm‑wide compliance with ISO 9001, ISO 14001, ISO 45001 and ISO 27001, ensuring ongoing certification readiness and effective governance of the Integrated Management System (IMS) and Information Security Management System (ISMS).
  • Develop, implement and maintain security governance practices in line with DISP and DSPF requirements, including preparation and submission of DISP documentation and audit support.
  • Manage personnel security requirements, including AGSVA security clearances, onboarding and offboarding of cleared personnel, clearance registers, and security awareness and training.
  • Maintain and enhance IMS and ISMS documentation, including policies, procedures, registers and records, ensuring accuracy and alignment with legislative and standards requirements.
  • Coordinate external certification and surveillance audits, managing audit readiness, stakeholder engagement, logistics, corrective actions and ongoing certification requirements.
  • Manage nonconformances, incidents, hazards and complaints, facilitating root cause analysis, corrective and preventive actions, trend analysis and continual improvement initiatives.
  • Coordinate management review processes and provide meaningful compliance, risk and performance reporting and dashboards to leadership and governance forums.
  • Deliver IMS and ISMS training, coaching and operational support to uplift capability, awareness and ownership across the business.
  • Coordinate security incident, insider threat and business continuity activities, including incident reporting, liaison with authorities, annual BCP testing, and ongoing monitoring and improvement of security practices.

Qualifications

  • Minimum of 3 years’ experience in a similar role, ideally within professional services, the public sector, or a compliance role in a comparably sized organisation.
  • Relevant tertiary qualification highly regarded but not necessary.
  • Professional certifications in compliance, risk management, or security (such as CPP, CISM, CISSP, or similar) are highly regarded.
  • Strong understanding of regulatory frameworks and governance standards applicable to Australian organisations.
  • Strong level of attention to detail.
  • Ability to handle sensitive information with professionalism and discretion.
  • Excellent communication and stakeholder engagement.

Due to security requirements involved with this role, we can only consider candidates who hold an Australian Citizenship.

Additional Information

Build your future- shape ours

We don’t just hire talent; we invest in it - with support that accelerates your success in every way

Why Join Us?

  • Professional Development: Expert mentorship, tailored training via KordaMentha Business School, study support, and our Accelerate program for Analysts to Associate Directors — build your brand, expand your network, and gain strategic insights from senior leaders
  • Flexibility: We champion work/life integration with options that fit your lifestyle.
  • Career Growth: Merit-based promotions, secondments, and opportunities to work alongside senior leaders on impactful projects.
  • Leave That Works for You: Buy extra leave and access volunteer, generous parental leave and career break options.
  • Culture & Connection: Social events, cultural celebrations, and our bi-ennial black-tie ball.
  • Family Support: Flexible parental leave, return-to-work support through our partner GracePapers, and resources for every stage of family life.
  • Health & Wellbeing: Inclusive wellness initiatives and confidential and industry leading EAP for you and your family.

This isn’t just a job — it’s a place where your ambitions are nurtured, your wellbeing is valued, and your contributions celebrated. Ready to shape your future with us?

Recruitment and Search Firms:

While your interest is appreciated, KordaMentha does not take responsibility or accept charges for unsolicited approaches.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against KordaMentha's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on KordaMentha's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    KordaMentha's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.