Cyber Security Manager at Compass

Setup: Hybrid
Location: Melbourne, Victoria
Type: Full-time
Posted: May 21, 2026

Description

Compass is seeking a Cyber Security Manager to lead and develop the organization's security strategy, focusing on platform, infrastructure, and application security. The role involves building and maintaining a risk register, conducting penetration tests, identifying and remediating security gaps, improving GCP security configurations, overseeing application security practices, leading incident detection and response, ensuring legal compliance, and managing junior team members.

Required Skills

Cybersecurity
Application Security
Infrastructure Security
Penetration Testing
Cloud Security
Google Cloud Platform (GCP)
AWS
Database Security
Australian Privacy Law
GDPR
Communication Skills
Team Leadership

Additional Information

Required Previous Experiences: 5+ years of hands-on cyber security experience with depth in both application and infrastructure security.
Strong penetration testing skills across web applications, APIs, network and cloud, including managing third-party engagements.
Proven ability to identify and remediate vulnerabilities in production environments.
Practical experience with security risk management - building a risk register, prioritising remediation and communicating risk to non-technical stakeholders.
Experience managing or mentoring junior security staff.
Preferred Qualifications: Relevant certifications such as OSCP, CISSP, CISM or equivalent.
Familiarity with UK/EU data protection requirements including GDPR.
Prior experience in EdTech, SaaS or a high-growth scale-up environment.