AI DevSecOps Governance SME - Contract

We are seeking an experienced AI DevSecOps Governance SME for an initial 12-month contract in Sydney to pioneer and scale AI-driven security governance across our enterprise software development lifecycle (SDLC).

In this forward-looking engineering role, you will lead the implementation of governance frameworks and security standards powered by Artificial Intelligence and Large Language Models (LLMs). You will be responsible for integrating intelligent automation directly into CI/CD pipelines—transforming how security policies, compliance checks, and code reviews are enforced across enterprise delivery teams.

Key Responsibilities

• AI-Driven Security Governance: Design, implement, and enforce DevSecOps governance frameworks, security guardrails, and compliance standards utilizing AI capabilities and LLMs.

• Automated Policy Enforcement: Build and deploy AI-assisted controls for automated code review, policy validation, threat modeling workflows, and security compliance checks within CI/CD pipelines.

• Responsible AI & Security Standards: Establish policy guidelines and security baselines for developer AI usage (e.g., AI code assistants, generative models, and agentic workflows) to manage data privacy, IP, and code vulnerability risks.

• Pipeline Integration & Shift-Left: Integrate intelligent security testing and automated remediation guidance seamlessly into modern CI/CD systems (e.g., GitHub Actions, GitLab CI, Azure DevOps).

• Cross-Functional Leadership: Partner closely with Security Architecture, Engineering Leads, and Product Teams to define AI governance roadmaps and drive developer adoption across squads.

Essential Experience:

• DevSecOps & AppSec Foundation: Deep hands-on experience establishing DevSecOps practices, CI/CD security controls, and application security standards in enterprise environments.

• AI & LLM Implementation: Practical experience using AI/LLM tools to automate security governance, policy checking, or code review workflows (not just theoretical understanding).

• Governance & Compliance: Proven ability to translate complex regulatory, security, and data privacy requirements into enforceable, automated software controls.

• Pipeline Tooling & Automation: Proficiency with modern CI/CD platforms, scripting (Python, Bash), and APIs to integrate AI workflows into active pipelines.

• Communication & Engagement: Excellent stakeholder management skills with a track record of driving security cultural shifts and developer adoption.

Desirable:

• Exposure to secure AI deployment frameworks, model risk management, or AI safety standards (e.g., OWASP Top 10 for LLMs, NIST AI RMF).

• Experience with enterprise code scanning tools (SAST, SCA, DAST) and AI-driven triage mechanisms.

Why NCS?

This is a place for people who like to get stuck in, bring ideas to life and make things happen. You'll work alongside experienced people who care about what they do, contribute to meaningful work and have the support to keep learning and grow your career. Whether you want to deepen your expertise, explore something new or take your career in a different direction, there's room to make it your own. We value Adventure, Excellence, Integrity, Ownership and Unity - bringing curiosity, collaboration and accountability to the way we work with our clients and each other.

Ready to make extraordinary happen?

We'd love to hear from you.

We celebrate diversity and inclusion

We value different perspectives, experiences and strengths our people bring. We're committed to an inclusive workplace where everyone has the opportunity to contribute, grow and succeed, and to providing equal employment opportunities and reasonable adjustments throughout the recruitment process.

Important information

Applicants will need valid Australian work rights and may be required to undergo relevant background, probity and police checks.

Agencies: NCS accepts candidate submissions only from agencies on our preferred supplier panel through the NCS Agency Portal.