Chief Risk, Compliance & Information Security

Compass Education; North Sydney Council; Hybrid; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid work

Professional development budget

Employee Assistance Program (EAP)

Parental leave

Team events

Employee Referral Program

Inclusive culture

Job summary

Compass Education is seeking a seasoned Head of Risk, Compliance and Information Security to own ISO 27001 and PCI DSS programs, and to drive risk, privacy and governance across its growing EdTech platform.

You will translate regulatory complexity into actionable priorities, partnering with technology and business leaders to balance security with growth in a hybrid, Australia-based role.

Qualifications

• 6+ years in compliance, risk or information security leadership.
• Experience owning PCI DSS compliance end to end.
• Multi-jurisdictional regulatory experience including AU Privacy Act and GDPR.
• Practical knowledge translating security frameworks into implementable requirements.
• Experience presenting risk posture to a Board or Audit & Risk Committee.

Responsibilities

• Own certification and audit programs including ISO 27001 and PCI DSS for payment environments.
• Manage data privacy obligations under Australia’s Privacy Act and other regimes.
• Oversee policy framework and information governance including data retention.
• Report regulatory and contractual compliance to ELT and Board.
• Lead a team including Legal Counsel and coordinate with Tech leadership.

Skills

PCI DSS compliance

ISO 27001 leadership

Regulatory compliance

Security framework knowledge

Board reporting

Policy development

Stakeholder communication

Education

CISSP

CISM

ICA/CIPP

Tools

GCP

Job description

Compass Education is seeking a seasoned Head of Risk, Compliance and Information Security to own ISO 27001 and PCI DSS programs, and to drive risk, privacy and governance across its growing EdTech platform.

You will translate regulatory complexity into actionable priorities, partnering with technology and business leaders to balance security with growth in a hybrid, Australia-based role.