Head of Compliance

Compass Education

Head of Compliance building ISO 27001, risk and regulatory frameworks for Compass, Australia’s K–12 school management platform. Overseeing compliance across Australia, the UK and Ireland.

Posted 8/19/2026full-timeHawthorn • 🇦🇺 AustraliaLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in building and managing compliance functions, with a strong focus on ISO 27001 certification, GDPR, and risk management. Proven ability to develop scalable compliance frameworks and maintain regulatory relationships across multiple jurisdictions.

Highest-signal resume keywords

ISO 27001 CertificationGDPR ComplianceRisk ManagementStakeholder CommunicationCompliance Framework Design

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Compliance ManagementRisk AssessmentISMS MaintenanceAudit PreparationRegulatory MonitoringPrivacy TrainingPayments ComplianceAutomation WorkflowsMulti-Jurisdictional ComplianceControl Documentation

Soft Skills

Strong Communication SkillsRelationship Building

Tools & Technologies

GCPCloud-First InfrastructureCompliance Monitoring Tools

Certifications & Qualifications

ICACIPPCISSPEmployee Working With Children CheckNational Police Check

Industry Keywords

SaaSFintechEdTechAU Privacy ActNIS2 ComplianceOpen Banking CompliancePayments OperationsThird-Party Compliance

Tech Stack

Tools & technologies

CloudGoogle Cloud Platform

About the role

Key responsibilities & impact

Own and build the compliance function from the ground up
Report to the Chief Financial Officer
Lead ISO 27001 certification and ongoing ISMS maintenance across Australian and international entities
Lead audit preparation, evidence gathering, control documentation and continuous audit readiness
Manage risk assessments and maintain the risk register, escalating material findings
Partner with Product and Engineering to embed compliance-by-design
Support UK and Ireland expansion with GDPR, UK GDPR and NIS2 compliance frameworks
Develop and embed organisation-wide compliance policies and procedures
Monitor ASIC, APRA, OAIC, ICO and CBI regulatory developments and translate them into action
Deliver privacy, information security and payments training and awareness programs
Provide compliance input into products, commercial initiatives and customer contracts
Oversee compliance across payment operations, third-party providers and commercial partners
Lead external compliance audits and liaise with partners and assessors
Build scalable onboarding and compliance documentation processes
Implement automation workflows to reduce manual compliance effort
Establish and maintain a compliance monitoring and assurance program
Report on the compliance risk register to Legal Counsel, CFO and Board
Build relationships with regulators and external partners
Drive proactive risk identification across the business

Requirements

What you’ll need

4+ years’ experience in compliance, risk or information security, ideally within a SaaS, fintech or regulated technology environment
Proven experience as the primary or sole compliance owner
Hands-on ISO 27001 experience, including leading a certification or maintaining an ISMS end to end
Multi-jurisdictional compliance experience, including practical application of the AU Privacy Act and GDPR
Ability to design practical and scalable compliance frameworks
Strong stakeholder communication skills and ability to translate regulatory complexity into clear, commercial language
Relevant qualifications such as ICA, CIPP, CISSP or equivalent are highly regarded
Experience in payments, acquiring or merchant services environments is highly regarded
Familiarity with PayTo, NPP or Open Banking compliance is highly regarded
Experience in a scaling SaaS, EdTech or fintech business is highly regarded
Exposure to GCP or cloud-first infrastructure compliance is highly regarded
Valid Employee Working With Children Check required before commencing employment
Satisfactory National Police Check required before commencing employment
Unrestricted work rights in Australia required before commencing employment

Benefits

Comp & perks

Hybrid working environment at office hubs
Learning and development opportunities
Dedicated PD budget
24/7 Employee Assistance Program (EAP), including face-to-face, phone and live chat support
Parental leave program for primary and secondary carers
Regular team events
Social budgets
In-office perks, including team lunches and end-of-week socials
Employee Referral Program
Supportive, inclusive culture
Equal opportunity employer committed to diversity and inclusion