Chief Risk, Compliance & Information Security

Compass Education; Sydney; Hybrid; AUD 210,000 - 270,000; Full time

Benefits offered by this job

Hybrid working environment

PD budget

Employee Assistance Program (EAP)

Parental leave

Job summary

Compass Education seeks a Head of Risk, Compliance and Information Security to lead risk, compliance and information security as the business scales. You will own ISO 27001 and PCI DSS programmes, oversee privacy obligations across AU/GDPR jurisdictions, and report posture to the ELT and Board.

Working closely with technical leaders, you will translate regulatory complexity into actionable priorities, policies and practical frameworks that support rapid growth while protecting data and reducing

Qualifications

• Maintain ISMS and manage certification audits and corrective actions for ISO 27001 and equivalent standards.

Responsibilities

• Own certification and audit programmes (ISO 27001, PCI DSS) and privacy obligations.
• Coordinate regulatory reporting to ELT and Board and manage governance reporting.
• Lead vendor contract data protection and security clauses with legal and tech input.
• Oversee team leadership of Legal Counsel and manage risk review processes.

Skills

Compliance leadership

Risk management

Information security

PCI DSS

ISO 27001

Board reporting

Policy design

Stakeholder management

Education

ICA / CIPP / CISSP / CISM

Job description

Compass Education seeks a Head of Risk, Compliance and Information Security to lead risk, compliance and information security as the business scales. You will own ISO 27001 and PCI DSS programmes, oversee privacy obligations across AU/GDPR jurisdictions, and report posture to the ELT and Board.

Working closely with technical leaders, you will translate regulatory complexity into actionable priorities, policies and practical frameworks that support rapid growth while protecting data and reducing