Security Compliance Specialist

The Opportunity  

Are you interested in crafting a scalable Security Compliance Program for the Asia Pacific region alongside global teams?  
 

As the Security Compliance Specialist at Adobe in Sydney, you'll be part of Adobe's Technology GRC (Tech GRC) team focusing on driving Australian Security Compliances, collaborating with external assessors, government agencies, product development & operations teams, core security teams, and others. This is your chance to create an outstanding impact and ensure sales go through optimally for a product-based organisation!  
 

What you'll Do  

• Build and maintain scalable processes to support security compliance across the APAC region, ensuring alignment with global standards and unified compliance strategies.  

• Translate security compliance requirements into actionable programs, including gap analyses, remediation plans, and implementation of necessary security controls.  

• Perform IRAP Readiness Assessment covering various cybersecurity guidelines of the Information Security Manual (ISM) for products seeking IRAP assessment.  

• Draft compliance reports to detail the compliance objectives, key findings, and work with teams to remediate key findings  

• Present Readiness Assessment result reports to summarize compliance goals, main insights, and next steps to partners and management regularly.  

• Coordinate the development of System Security Plan (SSP) documents for in-scope products  

• Liaising with external auditors and customers to help them gain comfort with Adobe’s security compliance program.  

• Review and coordinate Cloud Controls Matrix (CCM) updates and IRAP Cloud Security Assessment Report (IRAP Report) with assessors.  

• Work under the supervision and support of the Tech GRC manager and drive technology compliance activities across Adobe.  
   

What you need to succeed  

• Bachelor’s degree or equivalent experience in Information Security/Cyber Security or related field. Relevant security related certifications (e.g., CISA, CISSP, etc.) are a plus. 

• Minimum 3-5 years of related security compliance assessments, IT/Cloud auditing, and control testing experience.  

• Proven knowledge of Security Compliance frameworks such as IRAP, Cyber Essential Eight, ISO 270xx, SOC 2, ISMAP, etc.  

• Strong auditing background, technical expertise, and deep knowledge of information security controls including but not limited to SDLC, Cryptography, Identity/User Access management, Backup and DR processes.

• Knowledge of cloud infrastructure like AWS, Azure, GCP, along with hands-on experience.  

• Good interpersonal, verbal and written communication skills and possess strong organisational and planning skills.  

• Ability to anticipate questions, independently assess risk, and think critically and creatively.  

• Ability to collaborate in a distributed team in a fast-paced environment!