{"id":1819065,"url":"https://alion.io/job/rio-tinto-principal-advisor-cyber-security-architecture-appsec","title":"Principal Advisor Cyber Security Architecture (AppSec)","company":{"id":183,"name":"Rio Tinto","domain":"riotinto.com","url":"https://alion.io/company/rio-tinto","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":100,"open_postings":3,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":17,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Perth, Australia","Brisbane, Australia"],"countries":["AU"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":92000,"max_usd":238000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":753},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure DevOps","optional":false},{"name":"CI/CD","optional":false},{"name":"GitHub","optional":false},{"name":"ISO 27001","optional":false},{"name":"OWASP","optional":false},{"name":"Snyk","optional":false},{"name":"Azure","optional":true}],"status":"live","first_seen_at":"2026-09-22T00:00:00Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-11-02T15:03:01Z","board_verified":true,"closed_at":null,"days_open":42,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":41},"description":"Own and shape Application Security architecture, standards and services across Rio Tinto \nLead our Secure SDLC standards and manage the Snyk application security capability \nPermanent full-time opportunity based in Perth or Brisbane, working with a practical and collaborative Cyber Architecture team \nWe're Finding Better Ways™ to provide materials the world needs, now and in the future. Our values - care, courage and curiosity - guide how we work and how we treat each other.\nAbout the role\nWe are looking for a Principal Adviser - Cyber Security Architecture (AppSec) to lead the Application Security domain within Cyber Security. This role owns the strategy, standards, architecture and roadmap for secure software development and application security services across Rio Tinto.\nYou will work closely with Enterprise Architecture, software engineering, platform teams and business stakeholders to make security a practical part of how applications are designed, built, deployed and supported.\nThe role combines enterprise security architecture with hands-on ownership of key Application Security capabilities. It suits someone who can set direction, work directly with development teams, and turn security requirements into standards, patterns, tooling and practical guidance.\nWhat you'll be doing\nReporting to the Manager of Cyber Security Architecture and working within the Cyber Architecture team, you will: \nOwn the enterprise Application Security strategy, standards, reference architectures and service roadmap \nLead and continually improve Secure SDLC, DevSecOps, threat modelling and secure application development practices. \nWork with development, architecture and platform teams to embed practical security requirements into engineering standards, delivery processes and CI/CD pipelines \nOwn and support Application Security tooling and services, including Snyk and integrations with GitHub, Azure DevOps and Artifactory, working with vendors and internal teams to improve adoption and value \nGuide teams in identifying, prioritising and remediating application and dependency vulnerabilities, and improve the processes used to manage them \nDefine reusable security patterns and requirements for applications, APIs, cloud-native workloads, containers, secrets and AI-enabled solutions \nReview solution designs for higher-risk initiatives, and provide clear security advice to projects and development teams \nBuild strong relationships across Cyber, IS&T and the development community, mentor other architects and help lift Application Security capability across the organisation \nAbout you\nWe're looking for someone with strong Application Security experience who can operate at an enterprise scale while remaining practical and approachable. You do not need to meet every 'helpful for success' item to apply. If you bring relevant experience and are interested in the opportunity, we encourage you to submit an application.\nRequired for Success\nA commitment to the safety of yourself and your team \nStrong experience in Application Security architecture, Secure SDLC, DevSecOps, threat modelling, vulnerability management and security-by-design \nExperience creating and embedding security standards, patterns and guidance across development teams in a large, complex organisation \nProven experience owning or supporting Application Security platforms such as Snyk, including developer onboarding, platform integrations, service improvement and vulnerability remediation \nA practical communication style and the ability to build strong working relationships across Cyber, architecture, engineering, platform and business teams \nRelevant qualifications or certifications in cyber security, information security, software engineering or a related discipline, or equivalent practical experience \nHelpful for Success\nExperience with GitHub, Azure DevOps, Artifactory, CI/CD security, API security, secrets management, container security or software supply chain security \nExperience supporting cloud-native and AI-enabled software development, including the security risks introduced by AI coding tools and AI-enabled applications \nFamiliarity with frameworks and guidance such as OWASP, NIST, ISO 27001, CIISec or OFIA, and exposure to security architecture across identity, cloud, OT or infrastructure domains \nWhat we offer\nBe recognised for your contribution, your thinking and your hard work, and go home knowing you’ve helped the world progress.\nA work environment where safety is always the number one priority \nA permanent position working directly for Rio Tinto \nA competitive base salary reflective of your skills and experience with annual incentive program \nComprehensive medical benefits including subsidised private health insurance for employees and immediate family \nAttractive share ownership plan \nCompany provided insurance cover \nExtensive salary sacrifice & salary packaging options \nCareer development & education assistance to further your technical or leadership ambitions \nOngoing access to family-friendly health and medical wellbeing support \nLeave for all of life’s reasons (vacation/annual, paid parental, sick & cultural leave) \nExclusive employee discounts (banking, accommodation, cars, retail and more) \nWhere you'll be working\nIS&T\nInformation Systems and Technology (IS&T) is a global function delivering integrated and critical IT services and support to Rio Tinto’s mines, refineries, smelters, remote operations centres and corporate offices. IS&T’s mission is to power Rio Tinto’s pioneers with data and technology, enhancing safety, productivity, and value for the business. Through our collaborative partnerships and a deep understanding of our mining and metals business, IS&T carefully balances the implementation of ‘here and now’ solutions with emerging technologies that will help to create the digitally-optimised Rio Tinto of tomorrow.\nAbout Rio Tinto\nRio Tinto is a leading global mining and materials company. We operate in 35 countries where we produce iron ore, copper, aluminium, critical minerals, and other materials needed for the global energy transition and for people, communities, and nations to thrive.\nWe have been mining for 150 years and operate with knowledge built up across generations and continents. Our purpose is finding better ways to provide the materials the world needs - striving for innovation and continuous improvement to produce materials with low emissions and to the right environmental, social and governance standards. But we can’t do it on our own, so we’re focused on creating partnerships to solve problems, create win-win situations and meet opportunities.\nRespect and Inclusion\nAt Rio Tinto, we particularly welcome and encourage applications from Aboriginal and Torres Strait Islander people, women, the LGBTQ+ community, mature workers, people with disabilities and people from different cultural backgrounds.\nWe are committed to an inclusive environment where people feel comfortable to be themselves. We want our people to feel that all voices are heard, all cultures respected and that a variety of perspectives are not only welcome - they are essential to our success. We treat each other fairly and with dignity regardless of race, gender, nationality, ethnic origin, religion, age, sexual orientation or anything else that makes us different.","description_format":"text","description_chars":7353,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Education assistance","Health insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Application Security","Iron Ore","Non-ferrous Metals"],"lifecycle":[{"event":"open","at":"2026-10-04T04:16:20Z"},{"event":"close","at":"2026-10-19T12:48:05Z"},{"event":"reopen","at":"2026-10-22T07:50:13Z"}],"visa":[],"liveness":{"score":16,"band":"cold","label":"Long shot","p_open":1,"p_active":0.588,"p_room":0.28,"age_days":41,"expected_fill_days":17,"reasons":["conf:1","velocity","win:tail","crowd:brand"],"computed_at":"2026-11-02T06:13:15Z"},"pay":null,"html_url":"https://alion.io/job/rio-tinto-principal-advisor-cyber-security-architecture-appsec","json_url":"https://alion.io/job/rio-tinto-principal-advisor-cyber-security-architecture-appsec.json","meta":{"generated_at":"2026-11-03T00:08:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":264,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":183},"rest":"https://alion.io/mcp/rest/get_company?id=183"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frio-tinto-principal-advisor-cyber-security-architecture-appsec"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frio-tinto-principal-advisor-cyber-security-architecture-appsec"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frio-tinto-principal-advisor-cyber-security-architecture-appsec"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/rio-tinto-principal-advisor-cyber-security-architecture-appsec\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frio-tinto-principal-advisor-cyber-security-architecture-appsec"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1819065}},{"tool":"search_jobs","arguments":{"company":"riotinto.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1819065},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}