Software Compliance Officer

About the Role
RPMGlobal (RPM) is seeking a Software Compliance Officer to join our Technology team. The role will work across a large software development environment, helping product teams strengthen software security, manage compliance obligations and maintain customer trust.
Working across multiple product teams, the Software Compliance Officer will provide technical leadership in software security, licensing compliance, secure development practices, and vulnerability management. The role works closely with software engineers, architects, product teams, and business stakeholders to embed security and compliance requirements throughout the software development lifecycle.
This is an opportunity for a technically minded professional who enjoys working across teams, influencing outcomes, and improving the way software is designed, built, tested and released. The role combines practical application security expertise with the ability to balance risk, business outcomes, and engineering realities.
This is a permanent, full-time position based in our Brisbane CBD head office. This position is in-office; however, it allows for ad hoc working from home.
Key Responsibilities
Ensure software compliance across RPMGlobal's software portfolio and provide leadership on software security and compliance best practice.
Manage open-source software governance, licensing obligations, and third-party software compliance
Assess vulnerabilities identified through SAST, SCA, IAST, DAST and any other related security testing activities and provide remediation guidance to development teams
Maintain software compliance evidence and support audit readiness activities
Contribute to the evolution of secure software development practices and development standards
Support ISO 9001 processes aligned with ISO 27001 and corporate security requirements
Assist with security awareness, developer training initiatives, and continuous improvement activities
About You
Minimum 3 years' experience in a software product organisation delivering commercial software products to external customers.
Demonstrated experience in software security, application security, software assurance, secure software development, or software compliance
Experience assessing software vulnerabilities and advising on practical risk-based remediation approaches
Experience with SAST, SCA, IAST, and DAST dependency analysis and vulnerability management platforms
Knowledge of OWASP application security practices and secure design principles
Ability to balance security requirements with business and product delivery objectives
Strong command of the English language in both verbal and written form.
Eligible to work in Australia.
Highly Regarded Experience
Professional certifications such as CSSLP, CISSP, Security+, or equivalent industry qualifications
Understanding of open-source licensing and software component governance
Demonstrated success supporting commercial software products through customer security reviews, audits, penetration testing remediation, and enterprise compliance assessments.
Practical experience applying OWASP application security standards and secure design principles to improve software security outcomes.
About RPM
RPMGlobal is the mining industry’s leading enterprise technology and training provider and has been at the forefront of change and innovation in the mining industry for over 50 years.​​
We advance the mining industry towards a safer, more efficient, and more sustainable future through the delivery of innovative software solutions and deep domain mining expertise. Guided by our underlying principles of mining expertise, innovation, and sustainability, we strive to create safer and more efficient operations for our mining customers.
Our focus on providing advanced mining enterprise technology and training across the mining lifecycle enables us to guide customers through the industry's current and emerging challenges worldwide. This includes helping them meet the shift in social norms and consumer and investor ESG-related expectations.
Please, no agencies or recruiters.

Employment type
Full-Time

Work arrangement
No