Security Engineering - Excellence & Continuous Improvement Lead

Job Summary

As the Engineering Excellence & Continuous Compliance Lead working within the Security Engineering CoE, you will define and influence the adoption of consistent engineering, compliance, operational and resilience practices across Telstra's cyber security technology landscape.

What We Offer

• Performance-related pay
• Access to thousands of learning programs so you can level-up
• Global presence across 22 countries; opportunities to work where we do business.
• Purchased annual leave scheme
• Additional Telstra day off
• Additional 30% off Telstra products and services
• Toolkit provided (laptop + mobile phone + plan paid for)

What You’ll Do

Networks, Product & Technology - Cyber Security protects Telstra's networks, systems, and data from cyber threats.

As the Engineering Excellence & Continuous Compliance lead, you'll define what engineering excellence looks like across Security Engineering and influence its adoption across engineering, operations, programs and change. You'll establish clear standards, baselines and maturity expectations; strengthen technology operations and lifecycle practices; and translate compliance, Technology Assurance Process (TAP) outcomes and improvement intake into prioritised, implemented change. Working closely across Security Engineering groups and in particular with the Automation, Resilience, and Enterprise Security Architecture functions, you'll govern reusable patterns, uplift DevSecOps and operational practices, and help embed consistent, resilient and sustainable ways of working across Security.

Responsibilities include:

• Define, maintain and mature Security engineering standards, baselines and measures of engineering excellence, and influence their consistent adoption across programs, BAU, operations and change.
• Establish and improve technology operations and lifecycle practices, including adoption, currency, supportability, change management and retirement expectations for security technologies.
• Own pattern governance across the lifecycle, partnering with the Automation function to ensure reusable security patterns are governed, adopted, maintained and improved.
• Translate compliance obligations, TAP outcomes, assurance findings and improvement intake into clear priorities, accountable actions and implemented outcomes.
• Lead the uplift of DevSecOps and operational practices by defining fit-for-purpose guidance, controls and measures, then influencing delivery teams to embed them in day-to-day ways of working.
• Identify and prioritise systemic engineering and operational issues, drive cross-functional remediation, and track actions through to sustained implementation and measurable improvement.
• Partner with the Resilience function to develop reusable resilience guidance and support its adoption across Security technologies, services and delivery practices.

About You

You are a strategic cyber security professional with experience shaping security technologies, roadmaps and outcomes in complex environments. You build strong relationships, work effectively across engineering and operational teams, and use data-driven insights to influence decisions and drive meaningful improvements. With a keen interest in emerging technologies, including AI-driven security capabilities, you're adaptable, forward-thinking and passionate about continuous improvement.

Essential Skills and Experience:

• 5–7 years' experience in cyber security, technology engineering or operational environments, with practical experience defining and embedding engineering standards or practices.
• Demonstrated experience establishing standards, baselines, governance or maturity measures and driving adoption across multiple technical teams.
• Strong understanding of technology operations and lifecycle management, including BAU, program delivery, operational support, change management and technology currency.
• Experience interpreting compliance, assurance or governance outcomes and converting them into prioritised actions that are delivered through to implementation.
• Knowledge of DevSecOps, secure engineering and operational practices, with the ability to define pragmatic improvements for complex enterprise environments.
• Proven ability to influence without direct authority, build trusted relationships and align engineering, operations, automation, resilience and delivery stakeholders around shared outcomes.
• Strong analytical, communication and delivery skills, with a track record of identifying systemic issues, shaping clear recommendations and driving measurable continuous improvement.

Desirable:

• Experience with security pattern governance, reusable engineering patterns, automation-enabled controls or policy-as-code approaches.
• Experience supporting resilience, reliability or operational readiness practices for business-critical technologies and services.
• Familiarity with Telstra's business planning, performance, governance and Game Plan ways of working.
• Relevant tertiary qualifications or industry certifications in cyber security, engineering, technology operations, governance or service management.

We're amongst the top 2% of companies globally in the CDP Global Climate Change Index 2023, being awarded an 'A' rating. If you want to work for a company that cares about sustainability, we want to hear from you.

Diversity is more than a policy – it’s how we thrive

We know diverse teams deliver better outcomes, and we’re committed to creating an environment where everyone feels safe, respected, and supported — regardless of gender, background, or ability.

We strongly encourage women and gender-diverse people to apply and are happy to discuss flexible working arrangements or adjustments to the recruitment process.