Compliance Specialist (AWS and Australian Regulatory)

We are looking for an experienced Compliance Specialist with cloud security knowledge to support client engagements and internal compliance projects. This role works under the guidance of our senior compliance team while developing skills in AWS security compliance. The ideal candidate will have strong communication skills, proven consulting experience, and the ability to deliver quality work in a fast-paced, remote environment.

KEY RESPONSIBILITIES:

• Support compliance assessments for clients pursuing ISO 27001, SOC 2, iRAP, CPS 234, and other cybersecurity certifications under supervision of senior compliance leads
• Configure and maintain compliance automation tools like Vanta, Drata, or similar platforms for client programs
• Develop compliance documentation, including policies, procedures, and system descriptions, with senior review before client delivery
• Conduct gap analysis activities and assist in creating remediation plans
• Support client workshops and training sessions alongside senior team members
• Prepare documentation and evidence packages for external audits with firms like AssuranceLab
• Assist in scoping compliance programs for cloud-native and SaaS organizations
• Support multi-framework control mapping efforts
• Maintain regular communication with clients through status updates and check-ins
• Participate in peer reviews of compliance deliverables before client submission
• Provide weekly status reporting to the Security Practice Manager

REQUIRED COMPETENCIES:

• More than five years compliance experience, with at least 1 year in cloud environments
• Demonstrated hands-on experience implementing at least two of: ISO 27001, SOC 2, iRAP, CPS 234, PCI DSS, or CDR
• Minimum 2 years experience working with Australian clients OR in Australian regulatory/compliance environment
• Minimum 2 years in consulting or professional services environment (client-facing role)
• Hands-on experience with compliance automation platforms (Vanta, Drata, Secureframe, or similar)
• AWS Certified Cloud Practitioner minimum (or commitment to obtain within 90 days of hire)
• Understanding of AWS services, security concepts, and cloud architecture fundamentals
• Proven ability to communicate compliance concepts clearly to technical and non-technical audiences
• Excellent written English - will be required to produce client-ready documentation independently
• Strong attention to detail and organizational skills with ability to manage multiple client projects simultaneously
• Demonstrated ability to work independently in remote environment while maintaining consistent communication with team
• Comfortable participating in discussions with client stakeholders, including managers and directors

DESIRED COMPETENCIES:

• AWS Certified Solutions Architect Associate or AWS Security Specialty
• Experience with additional frameworks (GDPR, HIPAA, FedRAMP, NIST)
• Basic understanding of Infrastructure as Code (Terraform, CloudFormation)
• Prior experience preparing clients for specialized compliance audit firms
• Experience working with Australian financial services or government clients
• Familiarity with APRA regulatory requirements
• Security certifications (CISSP, CISA, Security+, or similar)