Software Compliance Manager

About the Role

RPMGlobal (RPM) is seeking a Software Compliance Officer to join our Technology team. The role will work across a large software development environment, helping product teams strengthen software security, manage compliance obligations and maintain customer trust.

Working across multiple product teams, the Software Compliance Officer will provide technical leadership in software security, licensing compliance, secure development practices, and vulnerability management. The role works closely with software engineers, architects, product teams, and business stakeholders to embed security and compliance requirements throughout the software development lifecycle.

This is an opportunity for a technically minded professional who enjoys working across teams, influencing outcomes, and improving the way software is designed, built, tested and released. The role combines practical application security expertise with the ability to balance risk, business outcomes, and engineering realities.

This is a permanent, full-time position based in our Brisbane CBD head office. This position is in-office; however, it allows for ad hoc working from home.

Key Responsibilities

Ensure software compliance across RPMGlobal's software portfolio and provide leadership on software security and compliance best practice.

Manage open-source software governance, licensing obligations, and third-party software compliance

Assess vulnerabilities identified through SAST, SCA, IAST, DAST and any other related security testing activities and provide remediation guidance to development teams

Maintain software compliance evidence and support audit readiness activities

Contribute to the evolution of secure software development practices and development standards

Support ISO 9001 processes aligned with ISO 27001 and corporate security requirements

Assist with security awareness, developer training initiatives, and continuous improvement activities

About You

Minimum 3 years' experience in a software product organisation delivering commercial software products to external customers.

Demonstrated experience in software security, application security, software assurance, secure software development, or software compliance

Experience assessing software vulnerabilities and advising on practical risk-based remediation approaches

Experience with SAST, SCA, IAST, and DAST dependency analysis and vulnerability management platforms

Knowledge of OWASP application security practices and secure design principles

Ability to balance security requirements with business and product delivery objectives

Strong command of the English language in both verbal and written form.

Eligible to work in Australia.

Highly Regarded Experience

Professional certifications such as CSSLP, CISSP, Security+, or equivalent industry qualifications

Understanding of open-source licensing and software component governance

Demonstrated success supporting commercial software products through customer security reviews, audits, penetration testing remediation, and enterprise compliance assessments.

Practical experience applying OWASP application security standards and secure design principles to improve software security outcomes.

About RPM

RPMGlobal is the mining industry’s leading enterprise technology and training provider and has been at the forefront of change and innovation in the mining industry for over 50 years.​​

We advance the mining industry towards a safer, more efficient, and more sustainable future through the delivery of innovative software solutions and deep domain mining expertise. Guided by our underlying principles of mining expertise, innovation, and sustainability, we strive to create safer and more efficient operations for our mining customers.

Our focus on providing advanced mining enterprise technology and training across the mining lifecycle enables us to guide customers through the industry's current and emerging challenges worldwide. This includes helping them meet the shift in social norms and consumer and investor ESG-related expectations.

Please, no agencies or recruiters.