Head of Risk, Compliance & Information Security (Hybrid)

Compass Education; Sydney; Hybrid; AUD 180,000 - 280,000; Full time

Benefits offered by this job

Hybrid working environment

PD budget

EAP program

Parental leave

Team events & socials

Employee Referral Program

Inclusive culture

Job summary

Compass Education seeks a Head of Risk, Compliance and Information Security to own ISO 27001, PCI DSS, and cross-border regulatory compliance. You will report to the ELT and Board, translating complex requirements into practical frameworks across the business.

You will lead governance and policy, collaborate with technology leaders, and drive information security risk management across a growing EdTech platform.

Qualifications

• 6+ years in compliance, risk or information security leadership.
• Experience owning PCI DSS compliance end to end.
• Hands on ISO 27001 experience, leading certification or ISMS.
• Multi-jurisdictional compliance experience including AU Privacy Act and GDPR.

Responsibilities

• Maintain ISMS and manage certification audits for ISO 27001.
• Scope and maintain PCI DSS compliance for payment processing.
• Oversee privacy by design, privacy impact assessments and data protection obligations.
• Manage information governance: data classification, retention and disposal.
• Own policy framework for security and information governance.
• Report regulatory and contractual compliance to ELT and Board.
• Oversee third party contractual compliance and vendor data protections.
• Lead and line-manage Legal Counsel and governance activities.

Skills

Leadership

Stakeholder communication

Regulatory knowledge

Risk management

Strategic thinking

Auditing

Education

Bachelor's degree in a relevant field

Certifications (CISSP/CISM/ICA/CIPP)

Tools

ISO 27001

PCI DSS

Privacy frameworks

Job description

Compass Education seeks a Head of Risk, Compliance and Information Security to own ISO 27001, PCI DSS, and cross-border regulatory compliance. You will report to the ELT and Board, translating complex requirements into practical frameworks across the business.

You will lead governance and policy, collaborate with technology leaders, and drive information security risk management across a growing EdTech platform.