Senior Security Analyst

Senior Security Analyst at splose, Adelaide, South Australia, Australia. splose is the AI-powered practice management platform transforming Allied Health. Trusted by over 17,000 Allied Health professionals across Australia, New Zealand, and the UK, splose is purpose-built to free clinicians from admin and let them focus on what matters most - helping people. and we're only just getting started. Backed by leading VC fund EVP and fuelled by a $5M Series A, we're scaling fast- investing deeply in our product, our people, and our global growth.

A security analyst plays a critical part in protecting, scaling, and maintaining the compliance of our cloud-native healthcare SaaS platform. They work closely with the technical leadership team to ensure our systems, data, and processes meet rigorous security and privacy standards while enabling rapid business growth. This is a hands-on role to strengthen our security posture across infrastructure, applications, and operations in a highly regulated environment.

• Ensure and maintain compliance with ISO 27001, GDPR, HIPAA, and the Australian Privacy Act, including the Notifiable Data Breaches scheme.
• Develop, implement, and maintain security policies, standards, and procedures aligned with business objectives.
• Perform security risk assessments for new and existing systems, vendors, and processes.
• Coordinate third-party penetration/security testing engagements, manage vulnerability assessments, and ensure timely remediation.
• Implement and maintain scalable infrastructure and endpoint security best practices in a cloud-first SaaS environment.
• Monitor security controls, logs, and alerts, escalating and responding as needed.
• Maintain and enhance incident response, disaster recovery, and business continuity plans.
• Coordinate and lead the response to cybersecurity incidents, including containment, eradication, and recovery efforts.
• Deliver security awareness and training programs to technical and non-technical teams.
• Develop and implement security strategy to support business objectives.
• Produce regular reports on security events, incident response metrics, and operational risks for management.
• Work closely with other technical teams (software, platform, IT) to ensure security is integrated into daily operations.
• Analyse emerging threats, vulnerabilities, and exploits to assess their potential impact on the organisation.
• Engage with executive leadership to align security strategy with business objectives.
• Support customer due diligence and security questionnaires during sales and compliance processes.

• 5+ years' experience in a security analyst, security engineer, or equivalent role within a SaaS or cloud-first environment.
• Demonstrated expertise with ISO 27001 or similar information security management systems.
• Strong understanding of GDPR, HIPAA, and the Australian Privacy Act and practical implementation requirements.
• Experience coordinating third-party penetration/security testing and managing remediation.
• Experience in and knowledge of infrastructure security, cloud security best practices (AWS or Azure), and endpoint security.
• Experience with risk assessments, threat modelling, and vulnerability management tools.
• Relevant certifications such as CISSP, CISM, ISO 27001 Lead Implementer/Auditor, or CEH.
• Previous experience in the healthcare industry or other highly regulated sectors.
• Familiarity with DevSecOps practices and security automation in CI/CD pipelines.

• Strong communication skills with the ability to explain complex security concepts to technical and non-technical stakeholders.
• Proven ability to influence and collaborate effectively with engineering, operations, and executive teams.
• Self-starter with excellent organisational skills, capable of driving initiatives independently in a fast-paced environment.
• High attention to detail with a pragmatic approach to balancing risk, compliance, and business objectives.

Interested candidates are encouraged to apply via this LinkedIn posting as soon as possible, as the role may close once we have a suitable shortlist. Shortlisted applicants will first be contacted for an initial screening call, followed by a panel interview.

splose is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. If you need support and adjustments in participating in this process, please let us know

• Seniority level: Mid-Senior level
• Employment type: Full-time
• Job function: Information Technology
• Industries: Software Development