Security IT and DevOps Officer

About Us

For more than 25 years, SFI Allegro has been supplying innovative work management and compliance control software solutions to help manage some of the world’s largest brands across the Food & Beverage, Manufacturing, Power & Water Services/Utilities and Pharmaceutical Industries.

About the Role

We are seeking a passionate Security IT and DevOps Officer to join our team and play a key role in maintaining and leading our information security, compliance and IT infrastructure - operations capabilities.

Reporting to the Risk & Compliance Manager, this role is responsible for ensuring the company’s information security controls, IT operations and supporting technologies are managed in accordance with ISO 27001:2022 requirements and internal policies and procedures.

Providing leadership across security governance, ICT & Hosting, you will work closely with Compliance, Delivery and Development teams to oversee daily IT operations, ensuring system reliability, security, and confidently challenge non-compliant practices to help drive a culture of accountability and continuous improvement.

Your role is key to maintaining and enhancing our cybersecurity, IT infrastructure, supporting the development and delivery of our product Xugo (xugo.com.au)—a cloud-based web solution built on Microsoft Azure using the latest web, mobile and cloud technologies.

Be part of a culture that prides itself on continuous improvement and innovation at every stage of our service delivery, ensuring that the user experience of our Xugo product is positive and enjoyable to use.

Key Responsibilities

IT Operations & Infrastructure:

• Oversee the performance, maintenance and security of IT infrastructure, including servers, networks and cloud environments
• Ensure secure and reliable operation of Microsoft 365, Azure and SaaS platforms
• System administration including firewall configuration and secure Wi-Fi environments
• Monitor system performance and optimise IT resources to ensure high availability and minimal downtime
• Implement and maintain ITIL-aligned service management processes to support delivery and continual improvement
• Support secure hosting and operational stability of cloud-based systems (Microsoft Azure environments).

Device and Hardware Management

• Manage end‑user devices (laptops, desktops, and mobiles) using Microsoft Intune, including configuration, patching, compliance enforcement and ongoing troubleshooting
• Maintain accurate IT asset inventory, including tracking, allocation and security of equipment
• Provide support for peripheral devices including monitors, printer and other hardware.

User Access and Support

• Manage onboarding and offboarding processes, ensuring appropriate access provisioning and removal using Microsoft Entra ID
• Manage software Installation, updates and licensing compliance across SFI Allegro
• Provide general IT Support – Resolving issues with software, connectivity and hardware to maintain productivity.

Cloud & Infrastructure Management

• Support secure cloud architecture and configuration aligned with security best practices
• Monitor system performance and optimise IT resources.

Security, Compliance & Governance (ISO 27001 and ISO 9001 Focus)

• Support and maintain ISO 27001 and ISO 9001 certification requirements and SFI Allegro's Integrated Management System
• Ensure IT operations are delivered in accordance with ISO 27001, ISO 9001 GDPR requirements and internal policies and procedures and applicable customer security and compliance obligations
• Support internal and external audits and participate in ISO 27001 certification audits, providing evidence of compliance
• Maintain and improve information security procedures and controls
• Provide confidence to challenge non-compliant practices and ensure adherence to defined policies, procedures and controls.

Threat Detection and Vulnerability Management

• Monitor Microsoft Defender for Endpoint to detect, monitor and mitigate vulnerabilities and security threats across devices.

Data Protection and Compliance

• Implement and maintain Microsoft Purview DLP to prevent unauthorised data transfers and protect sensitive and regulated information.

Supplier and Third-Party Management:

• Ensure suppliers meet contractual, security obligations and support assessment and management of third-party risk.

Strategic Planning and Continuous Improvement:

• Stay current with emerging IT trends, technologies, security threats and compliance requirements and identify opportunities for improvement
• Support IT governance initiatives and security awareness training across the business.

Skill Set

• IT operations management & service delivery in a SaaS environment (preferred)
• Experience in cybersecurity & compliance frameworks, particularly ISO 27001
• Experience with security audits, compliance reporting and evidence collection
• Practical experience with Microsoft cloud and security stack, including:

o Microsoft Entra ID

o Microsoft Intune

o Microsoft Defender for Endpoint

o Microsoft Purview DLP

o Microsoft Bicep

o Microsoft Azure environments

• Use Microsoft Bicep to automate provisioning of new environments, ensuring all necessary components are deployed – a bonus
• Experience with Cloud infrastructure (Azure regarded highly)
• Experience with DevOps environments or supporting development teams
• ITIL framework knowledge and service management & process optimisation - a bonus
• Incident response, risk management and security issue remediation
• Identity and Access Management, including access control and least privilege principles
• Strong analytical and problem-solving capability
• Excellent written and verbal communication skills, with ability to communicate clearly across technical and non-technical stakeholders
• Ability to work collaboratively in a team environment while managing priorities
• A strong work ethic and professional attitude.

Why work for SFI Allegro 

• Join an open, genuine, enthusiastic and high-performing team.
• Celebrate successes with team events!
• Enjoy year-round social activities.
• Be part of a high-tech company with a great culture where people enjoy the work they do and take pride in the software they create.

Qualifications

• Relevant tertiary or technical qualification in Information Technology, Computer Science, Cybersecurity or a related discipline
• 5+ years of experience in IT operations, infrastructure management, service delivery or IT security roles within a SaaS environment.

Join our supportive culture within a mid-sized business, where we focus on leveraging SFI Allegro’s strong brands while providing opportunities to nurture your career aligned with your strengths and aspirations.