Principal Advisor Cyber Security Architecture (AppSec)

Rio Tinto
Perth, Brisbane
Workplace: OnsiteFull timeFunction: Architecture & Urban PlanningSkills: ["Communication","Relationship building","Mentoring","Practical guidance","Stakeholder collaboration"]

Own Application Security architecture, standards, and services across Rio Tinto. Lead Secure SDLC and DevSecOps practices including threat modelling, vulnerability management, and secure-by-design delivery. Partner with enterprise architecture, software engineering, and platform teams to embed security requirements into engineering standards and CI/CD pipelines, manage Application Security tooling such as Snyk, and guide teams on identifying and remediating vulnerabilities.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Rio Tinto
Rio Tinto
6 hours ago

Principal Advisor Cyber Security Architecture (AppSec)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 6 hours agoStatus: Live

Job Summary

Own Application Security architecture, standards, and services across Rio Tinto. Lead Secure SDLC and DevSecOps practices including threat modelling, vulnerability management, and secure-by-design delivery. Partner with enterprise architecture, software engineering, and platform teams to embed security requirements into engineering standards and CI/CD pipelines, manage Application Security tooling such as Snyk, and guide teams on identifying and remediating vulnerabilities.
Location: Perth, Brisbane
Workplace: Onsite
Employment Type: Full time
Job Function: Architecture & Urban Planning
Seniority: Mid level

Key Responsibilities

  • •Own the enterprise Application Security strategy, standards, reference architectures, and service roadmap.
  • •Lead and continually improve Secure SDLC, DevSecOps, threat modelling, and secure application development practices.
  • •Embed practical security requirements into engineering standards, delivery processes, and CI/CD pipelines with development, architecture, and platform teams.
  • •Own and support Application Security tooling and services, including Snyk and integrations with GitHub, Azure DevOps, and Artifactory, improving adoption and value.
  • •Review higher-risk solution designs, guide vulnerability identification and remediation, and mentor other architects to lift Application Security capability across the organisation.

Pay and Benefits

Perks:Health InsuranceInsurance CoverSalary SacrificeLearning BudgetPaid ParentalPaid LeaveEmployee Discounts

Key Requirements

  • •Strong experience in Application Security architecture, Secure SDLC, DevSecOps, threat modelling, vulnerability management, and security-by-design.
  • •Experience creating and embedding security standards, patterns, and guidance across development teams in large, complex organisations.
  • •Proven experience owning or supporting Application Security platforms such as Snyk, including developer onboarding, integrations, service improvement, and vulnerability remediation.
  • •Strong, practical communication skills and ability to build relationships across Cyber, architecture, engineering, platform, and business teams.
  • •Relevant qualifications or certifications in cyber security, information security, software engineering, or related disciplines (or equivalent practical experience).
Skills:CommunicationRelationship buildingMentoringPractical guidanceStakeholder collaboration
Tech Stack:SnykGitHubAzure DevOpsArtifactoryDevSecOpsCI/CDOWASPNISTISO 27001CIISecOFIAAPI securitySecrets managementContainer securitySoftware supply chain securityThreat modellingSecure SDLC

Company Brief

Rio Tinto
Global mining and metals company that explores, mines, processes, and markets mineral resources including iron ore, aluminum, copper, and lithium. Supplies raw materials to industries worldwide across energy, infrastructure, transportation, and manufacturing.
Industry: Mining & Metals
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: London, United Kingdom
Founded: 1873
WebsiteLinkedIn