• Develop, execute, and evaluate cybersecurity exercises • Manage cyber threats by monitoring and responding to security incidents • Design and implement security controls for organization’s infrastructure • Analyze malware to understand behavior and defend against it • Simulate cyberattacks to identify vulnerabilities in systems

• Serve as the regional operations lead for data center physical security in Australia: run site security programs, coordinate with site operators and contract guard forces, and own in-region incident response and escalation • Administer and operate the region's electronic security systems access control, video management (VMS), intrusion detection, and visitor management including configuration, health monitoring, and lifecycle management • Design and document security systems architecture: device schedules, integration points, data flows, and network topology for security infrastructure at new and existing sites • Build and maintain integrations that bring security data sources (video, access events, alarms, sensors) into centralized monitoring and analysis platforms • Support construction-phase security for new builds and modular deployments in region: design reviews, commissioning of security systems, and security gates before handover • Manage regional security vendors and integrators scoping, delivery quality, and accountability • Write and maintain the operational backbone: post orders, standard operating procedures, and audit-ready documentation for regional security controls • Provide after-hours coverage and structured handoffs to US-based teams as part of follow-the-sun security operations

• Own Filevine’s FedRAMP 20x Moderate strategy, delivery plan, certification readiness, and ongoing compliance posture. • Lead the design and execution of FedRAMP evidence automation, continuous monitoring, and reporting required for Marketplace certification and sustained authorization. • Serve as the single-threaded owner for FedRAMP engagements with 3PAOs, the FedRAMP PMO, agency stakeholders, and internal executive sponsors. • Set the roadmap and priorities for dedicated FedRAMP engineering resources, ensuring regulatory requirements become shipped technical controls, automated evidence, and operationally sustainable processes. • Own POA&M governance, risk acceptance workflows, certification readiness reporting, and remediation planning across product and platform teams. • Ensure FedRAMP implementations are pragmatic, risk-based, technically grounded, and appropriately scoped for Filevine’s architecture, maturity, and business priorities. • Provide clear, consistent executive reporting on progress, risk, tradeoffs, dependencies, resourcing needs, and certification readiness. • Drive governance for vulnerability findings from scanning tools, penetration tests, customer reviews, audits, and bug bounty programs, including risk adjustment, remediation ownership, escalation, and executive tradeoff decisions. • Maintain a single source of truth for security/compliance status, control gaps, remediation commitments, and customer-facing trust claims. • Ensure trust center materials, customer security responses, sales enablement messaging, and public compliance claims are accurate, current, and defensible. • Translate privacy obligations and customer commitments into product, engineering, and operational requirements. • Support AI and data governance efforts by ensuring privacy, security, and customer trust requirements are reflected in product and operational decisions. • Drive alignment between compliance goals, engineering capacity, product strategy, customer commitments, and business risk.

• Collaborate within the security engineering team to design and implement security tooling. • Design, build, and maintain AWS cloud infrastructure using Infrastructure as Code (Terraform). • Create and support CI/CD pipelines using GitHub Actions to enable reliable, automated deployments. • Collaborate with engineering teams on architecture, reliability, and continuous improvement. • Partner with software development teams to ensure effective adoption of security tools. • Implement monitoring, logging, and alerting to improve system reliability and visibility. • Support resilience through capacity planning, performance tuning, disaster recovery, and runbooks. • Troubleshoot issues efficiently and communicate outcomes clearly. • Deliver production-ready systems on time and within budget.