Data Protection & Compliance Lead (ISO 27001 & AI Governance)

Vudoo; Melbourne; On-site; AUD 120,000 - 180,000; Full time

Job summary

Vudoo, founded in Melbourne and serving a global client base, seeks a Data Protection and Compliance Officer to oversee privacy, security and AI governance programs. You will own ISO 27001 and ISO 42001 programs, drive GDPR/commercial privacy compliance, and partner with engineering, legal and product teams to embed compliant practices.

You will champion risk-based controls, coordinate audits, and lead security awareness across a growing global team, ensuring responsible AI governance and data

Qualifications

• 4+ years' experience in information security, privacy, IT compliance or GRC.
• Hands-on experience implementing or maintaining an ISO 27001 ISMS and supporting certification audits.
• Working knowledge of GDPR and US privacy laws (e.g. CCPA/CPRA).
• Familiarity with ISO 42001 or AI governance frameworks or strong drive to build that expertise.
• Ability to translate regulatory requirements into practical controls for technical teams.

Responsibilities

• Own and maintain information security, privacy and AI governance systems, including policies and risk registers.
• Lead certification for ISO/IEC 27001 and ISO/IEC 42001 and future goals e.g SOC 2.
• Manage GDPR and US privacy law compliance across global footprint.
• Maintain operational procedures and controls with evidence tracking and remediation.
• Coordinate security assessments and AI system impact assessments for new/existing systems.
• Ensure access control, asset management and incident management policies are maintained.
• Coordinate internal audits and manage external certification and customer audits to close-out.
• Design and deliver security awareness training for the global team.

Skills

Information security

Privacy

GRC

Tools

ISO 27001 ISMS

ISO 42001

SOC 2

GDPR

Job description

Vudoo, founded in Melbourne and serving a global client base, seeks a Data Protection and Compliance Officer to oversee privacy, security and AI governance programs. You will own ISO 27001 and ISO 42001 programs, drive GDPR/commercial privacy compliance, and partner with engineering, legal and product teams to embed compliant practices.

You will champion risk-based controls, coordinate audits, and lead security awareness across a growing global team, ensuring responsible AI governance and data