IT Security, Risk & Compliance Lead

Goodstart•San Francisco, CA

About The Position

Goodstart is seeking an experienced risk and compliance professional to lead ICT governance, security risk management and compliance activities across a complex national environment. Working closely with the ICT Manager - Security & Risk, the role helps ensure ICT risks are identified, managed and reported in line with organisational risk appetite and regulatory requirements. The role strengthens Goodstart’s ICT risk, governance and compliance capability by developing and continually improving risk management frameworks, policies and controls. It partners with stakeholders across the business to drive audit and compliance activities, promote cyber risk awareness, protect systems, data and information assets, and support informed business decision-making. This is a permanent, full-time role based in Murarrie, Queensland. Candidates must have or obtain a valid Queensland Working with Children Check and complete the National Child Safety Foundation Training through the Geccko platform.

Requirements

Proven experience in ICT risk, governance, compliance or information security within a complex organisation.
Strong knowledge of risk management frameworks, controls and audit processes.
Experience developing and maintaining policies, standards, procedures and risk registers.
Demonstrated ability to gather, analyse and report on risk and compliance metrics.
Strong stakeholder management skills and ability to influence and advise at all levels of the business.
Experience supporting internal and external audits, compliance activities and evidence collection.
Excellent written and verbal communication skills, including the ability to translate complex concepts into practical business outcomes.
Experience working with security and compliance frameworks such as ISO27001 and PCI-DSS.
A proactive, detail-oriented approach and passion for continuous improvement and risk management.
Current Queensland Working with Children Check, or willingness to obtain a valid check.
Willingness to obtain a Certificate of Completion for the National Child Safety Foundation Training, completed via the Geccko platform.

Nice To Haves

Relevant qualifications or certifications in Risk, Governance, Information Security or Technology.

Responsibilities

Lead the development and continuous improvement of ICT risk management frameworks, policies and controls.
Ensure ICT risks are identified, managed and reported in line with organisational risk appetite and regulatory requirements.
Partner with stakeholders across the business on ICT governance, security risk and compliance activities.
Drive audit and compliance activities, including supporting internal and external audits and evidence collection.
Gather, analyse and report risk and compliance metrics.
Promote cyber risk awareness and help protect Goodstart’s systems, data and information assets.
Translate technical risk concepts into practical business outcomes and support informed business decision-making.

Benefits

Flexible work arrangements.
Salary packaging benefits through AccessPay (eligibility applies).
Discounted childcare of up to 15%.
Fitness Passport access to gyms and pools for the employee and family at a discounted price.
Discounted health care and access to an employee wellbeing program with BUPA.
Discounts on travel, gym memberships, Apple and Dell products, and more.
Optional free annual flu shot.
Option to purchase extra leave.
First Nations Support and Cultural Leave.
Investment in growth and development, including support, tools, training and experiences.