Head of Risk, Compliance & Information Security — Hybrid EdTech

Compass Education; Hawthorn (PA); Híbrido; USD 150 000 - 190 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Hybrid work

PD budget

EAP access

Parental leave

Team events

Employee referrals

Inclusive culture

Resumo da oferta

Compass Education is seeking a Head of Risk, Compliance and Information Security to own ISO 27001, PCI DSS and regulatory programs across multiple jurisdictions. You will report to the ELT and Board, translating complex requirements into practical, scalable controls.

You'll partner with technical leaders to shape policy, governance and risk reporting while maintaining data protection, privacy and security across a fast‑growing EdTech business.

Qualificações

• Maintain ISMS and certification audits for ISO 27001.
• Scope and maintain PCI DSS compliance for payments.
• Apply AU Privacy Act and GDPR in multi‑jurisdictional settings.
• Translate security standards into actionable technical requirements.
• Present risk and compliance posture to the Board.

Responsabilidades

• Maintain the compliance risk register and quarterly ELT/Board reports.
• Own the security and information policy framework.
• Oversee regulatory reporting and contractual compliance.
• Coordinate third‑party data protection and security clauses.
• Lead multi‑jurisdictional regulatory compliance programs.
• Collaborate with Director AI & Security and Head of Technology.

Conhecimentos

ISO 27001

PCI DSS

Regulatory compliance

Board reporting

Stakeholder management

SaaS/fintech experience

Formação académica

Certifications: ICA / CISSP / CISM / CIPP

Ferramentas

GRC tools

GCP

Descrição da oferta de emprego

Compass Education is seeking a Head of Risk, Compliance and Information Security to own ISO 27001, PCI DSS and regulatory programs across multiple jurisdictions. You will report to the ELT and Board, translating complex requirements into practical, scalable controls.

You'll partner with technical leaders to shape policy, governance and risk reporting while maintaining data protection, privacy and security across a fast‑growing EdTech business.