Full job description

Come shape the future of education with us.

At Compass, we're on a mission to transform the school day for everyone - from staff and students to families and administrators. We build smart, seamless technology that empowers schools to focus on what really matters: learning, growing and thriving.

That mission has fuelled our growth into a global scale-up, now supporting 5,000+ schools across three countries, backed by a team of 300+ people. Our all-in-one school management platform is redefining how education communities connect, communicate and operate.

We’re now looking for a Head of Risk, Compliance and Information Security to lead how Compass manages risk, compliance and information security as our business continues to evolve.

About the Role

You’ll take ownership of our certification and audit programmes, including ISO 27001 and PCI DSS, our approach to multi-jurisdictional regulatory compliance, information governance, and our security and information policy framework. You’ll be our designated point of accountability for reporting information security and compliance posture to the ELT and Board.

Working closely with our technical leaders, you’ll bring together the regulatory, risk and security picture across the business, translating complexity into clear priorities, practical frameworks and confident decision-making.

This is a genuine opportunity to build and shape how Compass approaches risk, compliance and information security, creating a framework that supports the business while keeping pace with its evolving technology, regulatory and commercial environment.

What you'll own

• Certifications and standards: maintain the ISMS, and manage certification audits and corrective actions for ISO 27001 and equivalent standards.
• Payment security compliance: scope and maintain PCI DSS compliance for any payment processing.
• Privacy and data protection: obligations under the Australian Privacy Principles and equivalent UK and Irish regimes, privacy impact assessments, privacy by design sign off, and handling of privacy complaints

Full job description

Introduction:

About us

We are an award-winning, national $18B public offer industry fund focused on the education and community sectors. Working for NGS Super means being part of something bigger and working to make a difference to our members and their financial future.

Our people are key to our success, and as we grow, we’re committed to finding and retaining the right talent to join the journey. As well as a flexible and fun workplace, we offer competitive benefits including additional leave entitlements, personal & professional development and health & wellbeing programs.

Click on the video below to learn more!

The Role

As our Security Analyst, you'll help protect NGS Super's systems, data and technology platforms from evolving cyber threats.

Reporting to the Head of Information Security, you'll work closely with technology teams and external partners to support day-to-day security operations, monitor risks and contribute to initiatives that strengthen our overall security posture. You'll gain exposure to a broad range of security disciplines including cloud security, incident response, security monitoring, automation and emerging technologies such as AI.

This is an excellent opportunity for someone early in their cybersecurity career who is eager to learn, develop technical skills and build hands-on experience in a collaborative and supportive environment.

What you’ll do

Reporting to the Head of Information Security, you'll: