EdTech Risk, Compliance & InfoSec Lead

Compass-Education; Sydney; Hybrid; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid work

PD budget

EAP

Parental leave

Team events

Referral program

Inclusive culture

Job summary

Compass is seeking a Head of Risk, Compliance and Information Security to lead the company’s risk and compliance programme across multiple jurisdictions. You will own the ISMS, PCI DSS scope, privacy obligations and governance framework, reporting posture to the ELT and Board.

You’ll partner with technical leaders to translate complex regulatory and security requirements into practical, scalable controls, policies and decision-making in a fast-moving EdTech environment.

Qualifications

• 6+ years in compliance, risk or information security leadership.
• Experience owning PCI DSS compliance end to end.
• Multi jurisdictional compliance including AU Privacy Act and GDPR.
• Translating regulatory/technical requirements into actionable items.

Responsibilities

• Maintain ISMS and certifications for ISO 27001 and equivalents.
• Scope and maintain PCI DSS for payment processing.
• Oversee privacy and data protection obligations across jurisdictions.
• Manage information governance, classifications, retention and records management.
• Own the security policy suite with technical collaborators.
• Lead regulatory reporting and response to due diligence.
• Summarize risk posture for ELT and Board quarterly.
• Ensure vendor contracts include data protection and security clauses.

Skills

Compliance leadership

Risk management

Information security

ISO 27001

PCI DSS

Privacy by design

Regulatory reporting

Stakeholder comms

Policy design

Cross-functional leadership

Education

ICA

CIPP

CISSP

CISM

Tools

GCP

Job description

Compass is seeking a Head of Risk, Compliance and Information Security to lead the company’s risk and compliance programme across multiple jurisdictions. You will own the ISMS, PCI DSS scope, privacy obligations and governance framework, reporting posture to the ELT and Board.

You’ll partner with technical leaders to translate complex regulatory and security requirements into practical, scalable controls, policies and decision-making in a fast-moving EdTech environment.