Compliance Specialist

Your opportunity:

The Compliance Specialist is responsible for supporting cyber awareness, compliance, and assurance activities that underpin TPG Telecom's cyber security, regulatory, and risk management obligations. The role works across technology and business stakeholders to maintain cyber security frameworks, coordinate audits, assess control effectiveness, manage supplier security risks, and support compliance with regulatory and industry obligations including NIST, PCI DSS, SOCI, FIRB, and IT General Controls (ITGC).

You'll make impact by:

• Perform comprehensive assessments and audits of organisational processes, procedures, maturity and practices to ensure compliance with applicable regulations, standards, and internal policies.
• Prepare the organisation for audits, including facilitating necessary documentation and evidence gathering.
• Establish and maintain a repository of compliance-related documentation, including policies, procedures, and records of compliance activities.
• Stay updated on relevant regulations and standards and assess their impact on the organisation's compliance requirements.
• Collaborate with stakeholders to communicate and reinforce compliance requirements throughout the organisation.
• Identify vulnerabilities, gaps, and non-compliance issues and recommend remediation actions.
• Develop and implement monitoring mechanisms to track compliance progress and ensure ongoing adherence to requirements.
• Evaluate documentation, conducting interviews, and analysing data to identify areas of non-compliance or potential risks.
• Review current processes with regulatory requirements, industry standards, and best practices to determine areas for improvement and develop actionable recommendations.
• Collaborate with stakeholders and relevant teams to develop strategies for addressing compliance gaps and improving overall compliance posture.
• Prepare detailed reports and documentation summarising compliance assessment findings, including identified issues, recommendations, and action plans.
• Facilitate cyber security training, awareness workshops, and engagement activities to promote a strong security and compliance culture across the organisation.

What you’ll bring:

• Experience in cyber security governance, risk, compliance, audit, or assurance functions.
• Knowledge of cybersecurity laws, regulations, and industry standards
• Relevant certifications such as CISA, ISO 27001 Auditor, Security + or equivalent.
• Experience analysing evidence, assessing controls, and documenting findings.
• Strong analytical and organisational skills.
• Strong presentation and influencing skills, with experience facilitating discussions, delivering training, leading workshops, and presenting compliance outcomes, audit findings, risks, and recommendations to diverse stakeholder groups.

Similar roles you may have held:

• Internal Auditor
• Risk and compliance officer, specialist, or manager
• IT Auditor
• Quality Assurance Auditor

What's in it for you?

• Flexible hybrid way of working (from home and office)
• ‘Stay Connected Mobile’ - Access to a free mobile plan
• ‘Stay Connected NBN’ - Access to a free, high-speed NBN plan (up to 500 Mbps)
• ‘Your Leave’ - additional leave to be used whenever you like - every year
• Access to TPG Learning Hub platform and internal development opportunities
• Access to Corporate Partner Discounts

Don’t meet every single requirement? That’s OK! At TPG Telecom, we’re all about creating an accessible workplace where everybody feels safe to bring their authentic self to work - regardless of background. If you think this role is a great fit for you but some of the qualifications don’t align with your experience, we still encourage you to apply - you might just be the perfect candidate for a similar role with us! Learn more about life at TPG Telecom here.

TPG Telecom also acknowledges the Gadigal People of the Eora Nation as the Traditional Custodians of lands and waterways where this office can be found in Barangaroo.

Our Talent Acquisition Team and Hiring Managers kindly request no unsolicited resumes or approaches from Recruitment Agencies. TPG Telecom is not responsible for any fees related to unsolicited resumes.

#LI-Hybrid