Lead Security Compliance Analyst

Opentext - The Information Company
OpenText is a global leader in information management, where innovation, creativity, and collaboration are the key components of our corporate culture. As a member of our team, you will have the opportunity to partner with the most highly regarded companies in the world, tackle complex issues, and contribute to projects that shape the future of digital transformation.

AI-First. Future-Driven. Human-Centered.
At OpenText, AI is at the heart of everything we do—powering innovation, transforming work, and empowering digital knowledge workers. We're hiring talent that AI can't replace to help us shape the future of information management. Join us.

The Opportunity
The Lead Security Analyst will have the opportunity to meaningfully contribute to the OpenText Compliance Program and play a key role in the continued development and maturity of an ever-growing Security Compliance Program that leads the delivery of compliance certifications that support customer security requirements.

In this role, you will be involved in leading and sustaining the Australian Information Security Registered Assessors Program (IRAP) framework by working collaboratively with internal teams, SMEs, external customers, vendors, auditors and other stakeholders. You will lead the IRAP compliance program and contribute to other public sector certifications. The Lead Security Analyst will provide advisory services to internal stakeholders, engage with government clients and agencies, plan and execute the IRAP gap assessment prior to the IRAP assessment, and manage the full IRAP lifecycle.

You Are Great At

• Setting strategic direction for audit readiness, managing compliance programs, driving continuous improvement activities, delivering dashboarding & reporting metrics
• Interfacing with stakeholders, articulating control implementation and impact, and establishing considerations for applying security and compliance concepts to a technical cloud environment
• Effectively communicating compliance program results, including assessment status, workflow, remediation, and reporting, to a broad audience including peers and senior leaders
• Leading small teams by assigning and tracking individual tasks and ensuring the team meets milestones and addresses/escalates challenges
• Supporting delivery of audit milestones to ensure audit timelines stay on target by proactively identifying and coordination resolution of roadblocks, compliance risk
• Timely escalations of roadblocks and issues that impact compliance progress and timelines
• Coordinating the overarching annual audit plan with internal and external auditors to support delivery of multiple, simultaneous audits and certifications (both new and existing) within the Open Text portfolio
• Collaborating cross-functionally with technology and business stakeholders to drive, track, and resolve all aspects of compliance readiness and audit execution

What It Takes

• 7+ years of experience in IT, InfoSec, and audit/compliance, with a concentration on leading multiple, simultaneous audit engagements for a Cloud Service Provider
• Familiar with the IRAP authorization process, development, and maintenance of core documents such as the Information Security Manual (ISM)
• Extensive knowledge/experience with identification, analysis, tracking, reporting, and remediation of vulnerabilities
• Automation first philosophy with the ability to identify and solution opportunities that reduce manual effort
• Strong technical skills around cloud, containers, GRC tools, and security tools
• Support the building and operation of an IRAP program and environment that integrates with a larger Federal Authorization program (FedRAMP, Protected B, etc.)
• Support activities such as security architecture reviews, risk assessments, continuous monitoring, DR/BCP
• Strong ability to communicate complex technical information and compliance requirements to leadership and stakeholders
• Experience working in a large CSP organization and with Australian Government
• Strong personal characteristics as demonstrated by the following: Owner's mindset, achievement-oriented, self-controlled, self-confident, flexible, approachable, and dedicated.
• Must have or be willing to obtain NV1 Security Clearance Certificate
• Required industry standard certifications (CISSP, CISA) or equivalent.
• Bachelor's and master's degree in Information Technology, Business, or related vocations.

OpenText's efforts to build an inclusive work environment go beyond simply complying with applicable laws. Our Employment Equity and Diversity Policy provides direction on maintaining a working environment that is inclusive of everyone, regardless of culture, national origin, race, color, gender, gender identification, sexual orientation, family status, age, veteran status, disability, religion, or other basis protected by applicable laws.

If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please contact us at Our proactive approach fosters collaboration, innovation, and personal growth, enriching OpenText's vibrant workplace.