Security Specialist

The Security Specialist will lead and support key cyber security governance, risk and compliance (GRC) activities across Kinde. This is a permanent, full-time role based in Australia, remote or from agreed locations.

You'll be responsible for developing and maintaining security policies and controls, managing cyber security risks, coordinating security audits and compliance assessments, and supporting Kinde's ongoing SOC 2 and ISO 27001 certification and assurance activities.

Working across engineering, technology, operations, and business teams, you'll translate security, regulatory, and compliance requirements into practical controls and processes that protect Kinde's systems, platform, customer information, and business operations.

Most of the time you will work on the stuff listed below:

• Develop, implement, maintain and continuously improve cyber security policies, procedures, standards and guidelines in line with regulatory requirements, industry standards and recognised security practices.
• Lead cyber security risk management activities, including identifying, assessing and prioritising risks, maintaining risk assessments, developing risk treatment and mitigation plans, and reporting security risks to relevant stakeholders.
• Lead the planning, preparation and execution of security certification and assurance activities, including SOC 2 and ISO 27001, coordinating audits, evidence collection, documentation, remediation and ongoing compliance.
• Conduct security audits, compliance assessments and control reviews to identify security gaps, evaluate control effectiveness and recommend improvements.
• Identify and assess security vulnerabilities and control weaknesses across systems, applications and infrastructure, evaluate their associated business risk and coordinate risk-based remediation with engineering and technology teams.
• Build and maintain Kinde's cyber security governance framework, including security policies, procedures, controls, risk management processes and supporting documentation.
• Develop and maintain appropriate information and system classification requirements to support the prioritisation and implementation of security controls and risk mitigation activities.
• Collaborate with engineering, technology, operations and other cross-functional teams to embed security and compliance requirements throughout systems, products and development processes.
• Monitor security risks, incidents and control deficiencies, coordinate remediation activities and support security incident investigations and post-incident reporting where required.
• Provide practical cyber security guidance to employees and stakeholders and develop security awareness and training initiatives covering security policies, best practices and incident response.
• Conduct compliance assessments and support alignment with applicable cyber security, privacy, data protection and regulatory requirements.
• Assess privacy risk associated with new and existing systems, products and data processing activities and recommend appropriate security and privacy controls.
• Prepare clear security governance, risk, audit and compliance reports for management and relevant stakeholders, including findings, risk treatment activities and recommendations for continuous improvement.
• Assess cyber security and privacy risk associated with third-party providers and services and recommend appropriate risk treatment measures.

Don't fret, you won't be working on these tasks alone. Some of the people you'll work alongside include:

• Our CEO and Founders
• Growth team
• Support team
• Software Engineers
• Product managers

When you work here you understand that our values are lived here – not just spoken about. That we care deeply about creating an environment where people can do their life's best work. A place where we show human kindness and gentle manners towards each other, and are free of prejudice of any kind.

We believe that every distinct voice moves us forward, and that only through this can we create a company of giants. The way up is open to everybody, regardless ofreligion, race, gender, or sexual preference.