IT Risk and Compliance Officer

Join Our Team as an IT Risk and Compliance Officer

Your Role: As the IT Risk and Compliance Officer, you will lead our compliance initiatives, ensuring adherence to standards like PCI DSS, ISO 27001, and ASD Essential 8 Mitigations. Your primary focus will be to manage audits, identify potential risks, and collaborate with IT and security teams to enforce strategic security measures. You will work with senior leadership to design effective strategies to mitigate technology-related risks, ensuring the organisation's systems are robust and secure.

About the Company

Compare Club is Australia's most trusted financial comparison service. We help over 1,000,000 people in Australia each year find savings on health insurance, life insurance, energy plans, home loans, car insurance & more.

Key Responsibilities:

• Lead audits and risk assessments.
• Conduct comprehensive employee training on security and compliance policies.
• Audit IT systems and processes to verify compliance with regulations and industry standards.
• Report and manage security breaches or compliance issues, ensuring immediate resolution.
• Monitor and drive remediation efforts for identified issues throughout the organisation.
• Collaborate with system owners to implement security measures for sensitive data.
• Ensure adherence to data privacy and security laws.
• Develop and update policies and procedures to enhance data security and compliance.
• Create compliance plans for ISO 27001, PCI DSS, and other relevant standards.
• Oversee ITIL process adherence and manage Change Management processes, including coordination with the Change Advisory Board.

Key Result Areas:

• Develop robust policies to prevent data breaches and safeguard sensitive information.
• Conduct regular audits to maintain compliance with applicable laws and standards.
• Identify and mitigate technology-related risks and vulnerabilities.
• Provide compliance-related guidance and support organisation-wide.
• Work alongside senior leadership to strategise risk mitigation.
• Stay informed on industry regulations, trends, and emerging risks.
• Train organisational members on best practices in compliance.

Skills & Qualifications:

• Strong expertise in industry regulations, standards, and risk management.
• Excellent communication, interpersonal, and organisational skills.
• Ability to independently conduct audits and assessments to ensure compliance.
• Knowledge of security protocols and controls, experienced in collaborating with IT and security teams.
• Proficient in problem-solving and critical thinking, capable of investigating compliance issues.
• Experience developing and implementing effective policies and procedures.
• Proven ability to work closely with senior leadership to tackle tech-related risks.

Competencies:

• In-depth understanding of industry regulations and ability to ensure compliance.
• Expertise in identifying and mitigating tech-related risks and vulnerabilities.
• Strong organisational skills to manage workload and prioritise tasks effectively.
• Ability to communicate effectively and establish positive relationships.
• Collaborative spirit to work seamlessly with IT and security teams.

Why Join Us? At Compare Club, we live by our values: 'Be passionate about the customer and what we do', 'Get it done', 'We are one team', 'Have a Crack', and 'Driven for results'. You're not just joining a company; you're joining a team that values innovation, support, and results-driven work. Report directly to the Cyber Security Lead in this offshore role and be at the forefront of maintaining and enhancing our compliance landscape.

Apply Now to be a part of our committed and dynamic team, where your contributions drive results and make a significant impact.