Senior Security Analyst

About us

splose is the AI-powered practice management platform transforming Allied Health. Trusted by over 17,000 Allied Health professionals across Australia, New Zealand, and the UK, splose is purpose-built to free clinicians from admin and let them focus on what matters most - helping people. and we're only just getting started. Backed by leading VC fund EVP and fuelled by a $5M Series A, we're scaling fast- investing deeply in our product, our people, and our global growth.

About the role

A security analyst plays a critical part in protecting, scaling, and maintaining the compliance of our cloud-native healthcare SaaS platform.

They work closely with the technical leadership team to ensure our systems, data, and processes meet rigorous security and privacy standards while enabling rapid business growth. This is a hands-on role to strengthen our security posture across infrastructure, applications, and operations in a highly regulated environment.

Key responsibilities

• Ensure and maintain compliance with
  ISO 27001
  ,
  GDPR
  ,
  HIPAA
  , and the
  Australian Privacy Act
  , including the Notifiable Data Breaches scheme.
• Develop, implement, and maintain security policies, standards, and procedures aligned with business objectives.
• Perform security risk assessments for new and existing systems, vendors, and processes.
• Coordinate
  third-party penetration/security testing
  engagements, manage vulnerability assessments, and ensure timely remediation.
• Implement and maintain scalable infrastructure and endpoint security best practices in a cloud-first SaaS environment.
• Monitor security controls, logs, and alerts, escalating and responding as needed.
• Maintain and enhance incident response, disaster recovery, and business continuity plans.
• Coordinate and lead the response to cybersecurity incidents, including containment, eradication, and recovery efforts.Deliver security awareness and training programs to technical and non-technical teams.
• Develop and implement security strategy to support business objectives
• Produce regular reports on security events, incident response metrics, and operational risks for management.
• Work closely with other technical teams (software, platform, IT) to ensure security is integrated into daily operations.
• Analyse emerging threats, vulnerabilities, and exploits to assess their potential impact on the organisation.
• Engage with executive leadership to align security strategy with business objectives.
• Support customer due diligence and security questionnaires during sales and compliance processes.

Technical Skills & Experience

Must have

• 5+ years' experience in a security analyst, security engineer, or equivalent role within a SaaS or cloud-first environment.
• Demonstrated expertise with
  ISO 27001
  or similar information security management systems.
• Strong understanding of
  GDPR
  ,
  HIPAA
  , and the
  Australian Privacy Act
  and practical implementation requirements.
• Experience coordinating
  third-party penetration/security testing
  and managing remediation.
• Proven experience in vendor management
• Experience in and knowledge of infrastructure security, cloud security best practices (AWS or Azure), and endpoint security.
• Experience with risk assessments, threat modelling, and vulnerability management tools.

Favourable

• Relevant certifications such as CISSP, CISM, ISO 27001 Lead Implementer/Auditor, or CEH.
• Previous experience in the healthcare industry or other highly regulated sectors.
• Familiarity with DevSecOps practices and security automation in CI/CD pipelines.

Interpersonal & Collaboration skills

• Strong communication skills with the ability to explain complex security concepts to technical and non-technical stakeholders.
• Proven ability to influence and collaborate effectively with engineering, operations, and executive teams.
• Self-starter with excellent organisational skills, capable of driving initiatives independently in a fast-paced environment.
• High attention to detail with a pragmatic approach to balancing risk, compliance, and business objectives.

How to apply

Interested candidates are encouraged to
apply via this LinkedIn posting
as soon as possible, as the role may close once we have a suitable shortlist. Shortlisted applicants will first be contacted for an initial screening call, followed by a panel interview.

Equal Opportunity Employer

splose is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. If you need support and adjustments in participating in this process, please let us know

Recruiters: Thank you for your interest, but we are not accepting agency submissions for this role at this stage.