Strategic ICT Security, Risk & Compliance Leader

Goodstart Early Learning; Brisbane; On-site; AUD 140,000 - 180,000; Full time

Benefits offered by this job

Flexible work arrangements

Salary packaging benefits

Discounted childcare

Fitness Passport

Employee wellbeing program

Exclusive discounts

Free annual flu shot

Opportunity to purchase extra leave

First Nations Support

Growth and development support

Job summary

Goodstart Early Learning in Murarrie, QLD, is seeking an ICT Security Risk & Compliance Lead to drive governance, risk management and compliance across the nationwide organisation.

You will partner with ICT and business leaders to strengthen risk frameworks, support audits, develop policies, and translate technical risk into practical outcomes while protecting children’s data. This permanent full-time role also offers ongoing professional development and a supportive, child-safe environment.

Qualifications

• Proven experience in ICT risk, governance, compliance or information security within a complex organisation.
• Strong knowledge of risk management frameworks, controls and audit processes.
• Experience developing and maintaining policies, standards, procedures and risk registers.
• Demonstrated ability to gather, analyse and report on risk and compliance metrics.

Responsibilities

• Lead development and continuous improvement of risk management frameworks, policies, and controls.
• Drive audit and compliance activities across national operations.
• Partner with stakeholders to translate technical risk concepts into practical business outcomes.

Skills

ICT risk governance

Security risk management

Policy development

Audit support

Stakeholder management

ISO27001

PCI-DSS

Education

CISM / CISSP Certification

ISO27001 Lead Implementer

Job description

Goodstart Early Learning in Murarrie, QLD, is seeking an ICT Security Risk & Compliance Lead to drive governance, risk management and compliance across the nationwide organisation.

You will partner with ICT and business leaders to strengthen risk frameworks, support audits, develop policies, and translate technical risk into practical outcomes while protecting children’s data. This permanent full-time role also offers ongoing professional development and a supportive, child-safe environment.