{"id":2059658,"url":"https://alion.io/job/open-point-it-security-manager","title":"IT & Security Manager","company":{"id":9415,"name":"Open Point","domain":"openpoint.com","url":"https://alion.io/company/open-point","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Rippling","truth_index":null},"role":"Management","role_family":"Management","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Newstead, Australia"],"countries":["AU"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":75000,"max_usd":152000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":8},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"C#","optional":false},{"name":"CI/CD","optional":false},{"name":"Claude","optional":false},{"name":"Datadog","optional":false},{"name":"Google Workspace","optional":false},{"name":"ISO 27001","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"MS SQL","optional":false},{"name":"OpenTelemetry","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"TypeScript","optional":false},{"name":"GDPR","optional":true}],"status":"live","first_seen_at":"2026-10-07T23:00:28Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-10T21:55:08Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Location: Melbourne or Brisbane (Hybrid)\nEmployment Type: Full-Time\nTo be considered for this role, you must be based in Melbourne or Brisbane and have unrestricted working rights in Australia on a permanent, full-time basis.\nAbout Open Point\nOpen Point is a leading global digital engagement company that develops software to help organisations manage their entire community and stakeholder engagement process, from initial discovery to final delivery. We serve government clients and organisations throughout the United States, Canada, Australia, New Zealand, and Europe.\nOur product Open Point, is a centralised stakeholder relationship management platform that helps organisations better understand stakeholder sentiment, engage strategically, and build stronger relationships, all within a single source of truth.\nWe hold ISO 27001, ISO 9001 and SOC 2 Type II certifications. Our customers are public sector organisations whose own accountability depends on ours, and they hold us to a high standard.\nThe Opportunity\nWe are hiring an IT & Security Manager to own two things most companies split: the internal technology our people rely on, and the security and compliance posture our customers assess us on. You will work alongside a counterpart in Canada on IT support coverage, while holding full ownership of security and compliance for Open Point.\nThis role suits someone who has run IT or information security in a SaaS business and wants complete ownership of the security and compliance function, plus a shared role in internal support.\nYou will report to the Chief Product & Technology Officer and work closely with the Engineering Manager, Principal Engineer, your Canada-based IT Manager counterpart, and our sales and customer teams. You will be the person a government procurement team's security questions ultimately land with, and the person our executive relies on to know where our real risks sit.\nBecause this role both operates controls and reports on their effectiveness, we deliberately build in independent checks. Access reviews, control testing, and audit findings are signed off outside the IT function, penetration testing and control assessment are performed by independent third parties, and you report risk directly to the executive. We would rather design this properly than explain it to an auditor later, and we expect you to hold us to it.\nWhy Join Open Point?\nFlexible hybrid working arrangement\nUnlimited coffee tab at the local café\nPaid birthday leave annually\nProfessional development reimbursement\nAnnual wellness reimbursement\nOne-off home office allowance\nGenerous paid parental leave options\nWhat You'll Do\nIT support (shared with your Canada counterpart)\nRun identity and access management across our SaaS estate, including joiner, mover, and leaver processes that hold up under audit\nOwn endpoint management, device compliance, and patching across a distributed workforce, coordinating coverage with your Canada counterpart\nManage SaaS administration, licensing, and technology spend, with a view on consolidation and cost\nOwn internal support, escalation paths, and the tooling that makes both faster, with shared on-call handover across time zones\n\nSecurity and compliance (owned by this role)\nOwn ISO 27001, ISO 9001, and SOC 2 Type II: scope, surveillance audits, recertification, and the annual calendar\nMaintain the ISMS, risk register, policy set, and evidence base as a live system rather than an annual scramble\nRun internal audits, management review, and corrective actions, and manage our certification bodies and external auditors\nOwn security questionnaires, RFP security schedules, and privacy impact assessments from customers, and the trust documentation behind them\nOperate and improve the AI assisted workflow used to draft questionnaire responses, and hold accountability for the accuracy of what goes out\nMaintain the enterprise risk register and report on it to the executive and the board\nOwn security incident response: the plan, the drills, and the coordination when something real happens\nProvide governance over product security, reviewing that secure development practices, dependency management, vulnerability handling, and cloud configuration standards are followed and effective\nCommission and manage independent penetration testing, and track findings to closure\nOwn data residency and support access controls, and make sure public commitments match operational reality\nRun security awareness, phishing simulation, and onboarding training\nSupport sales and customer teams in security conversations, including joining customer calls when needed\n\nOur Environment Cloud & Infrastructure:\nAzure & AWS, Terraform, CI/CD pipelines Observability: Azure App Services, Datadog, OpenTelemetry Product Stack: .NET (C#), React + TypeScript, MSSQL Identity & Endpoint: [Microsoft Entra ID / Google Workspace], [MDM platform] Compliance & Assurance: ISO 27001, ISO 9001, SOC 2 Type II, [GRC platform] AI Tooling: Claude and AI-assisted workflows across engineering and operations\nSkills & Experience\n8+ years in IT or information security, ideally in a SaaS or technology business selling to government or regulated sectors\nDemonstrated ownership of ISO 27001 and SOC 2 certification cycles, not just participation in them\nStrong grasp of identity and access management, endpoint security and cloud security fundamentals in AWS or Azure\nExperience responding to customer security assessments, with the judgement to know what to commit to and what to qualify\nAble to explain technical risk to a non-technical executive audience and to a sceptical government procurement officer\nComfortable being the accountable owner rather than an escalation point\nNice to Have ISO 27001 Lead Implementer or Lead Auditor, CISSP, CISM or equivalent certification\nExperience with privacy regimes across multiple jurisdictions, particularly the Australian Privacy Principles and GDPR\nExposure to ISO 9001 or other quality management systems\nExperience in a private equity backed business, or through a due diligence process\nExperience supporting a distributed workforce across several time zones\nExperience using AI tools to automate compliance evidence, documentation or questionnaire response\nWhat We Value\nCollaboration and Teamwork: Successful outcomes are never achieved alone. You need to work well with others and be accountable for your work. We also expect you to communicate often, be honest and take initiative when appropriate. You will be working openly using modern collaborative platforms.\nPassion for Learning: You need to love what you do. We expect you to always be motivated, challenge yourself and continuously learn without having to push you into it. This will include learning things outside your area of expertise and making others around you better.\nTalent and Courage: We aim to produce great outcomes. When solving problems, we expect creativity and a focus on the end user. We want you to have tough conversations if things are not right and the courage to ask when you don't know.\nAt Open Point, we believe that diversity drives success. We are an equal opportunity employer that provides a safe and supportive environment where everyone and anyone can grow. If you require any accommodations or adjustments to participate in the recruitment process, please let us know by including your request in your application.","description_format":"text","description_chars":7391,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Home office","Hybrid work","Parental leave","Professional development"],"hiring_locations":[{"name":"Australia","iso":"AU","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","CRM Software","Digital Government","Digital Media"],"lifecycle":[{"event":"open","at":"2026-10-08T01:21:17Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":2,"expected_fill_days":39,"reasons":["conf:1","win:early"],"computed_at":"2026-10-10T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/open-point-it-security-manager","json_url":"https://alion.io/job/open-point-it-security-manager.json","meta":{"generated_at":"2026-10-11T00:30:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":310,"day_limit":5000,"remaining_today":4690,"minute_limit":60,"resets_at":"2026-10-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":9415},"rest":"https://alion.io/mcp/rest/get_company?id=9415"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fopen-point-it-security-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fopen-point-it-security-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fopen-point-it-security-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/open-point-it-security-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fopen-point-it-security-manager"}]}