Technology Governance & Compliance Analyst

Drive process improvement, ensure compliance, and lead change. Transformative role at the heart of tech governance.

About us Only About Children (OAC) is owned by Bright Horizons, a leading global provider of high-quality early education and childcare, backup care, and workplace education services.
At OAC, our unique approach to early years learning goes beyond education to encompass the health and wellbeing of every child in our care. We call this The OAC Way. We operate over 80 campuses across Sydney, Melbourne and Brisbane and provide high-quality early years education and care to over 8,000 families.
About the role Working within our dynamic IT Operations Team based in St Leonards, the Technology Governance and Compliance Analyst plays a pivotal role in propelling our technological fortitude. Beyond policies and frameworks, it's an opportunity to champion process improvement and instil accountability in our IT infrastructure.
Collaborating across the organisation, you'll ensure OAC's technology complies with regulations and aligns with broader compliance frameworks, including Sarbanes-Oxley internal control obligations. As the Ambassador for SOX Compliance, you'll ensure adherence to change control and problem management intricacies. You will also actively engages in change and project management, both within IT and across the business. It's not just a role; it's an expedition into the transformative core of Technology Governance.
Key Responsibilities (not limited to): Governance and Compliance

• Enhance and oversee OAC's Technology Governance framework, risk management, and compliance initiatives, ensuring alignment with business objectives and SOX compliance.
• Collaborate with cross-functional teams to identify, analyse, and mitigate risks, developing strategies and implementing processes that contribute to effective risk management within the organisation.
• Monitor IT compliance with governance policies, regulatory requirements, and internal controls, while actively managing technology assurance and compliance activities for OAC.
• Define, document, and regularly test technology and cyber controls, overseeing the controls assurance process, working with audit teams, and facilitating user access reviews to ensure comprehensive IT General Controls compliance.

Technical

• Manage OAC’s “Onetrust” and “UpGuard” platforms to ensure vendors are onboarded appropriately. Develop, implement, and continuously improve processes for managing TGC, including third-party risk, and implement and manage governance frameworks around document storage such as SharePoint and SMB sharing.
• Generate weekly, fortnightly, and monthly reports, showcasing your commitment to excellence.
• Be a SOX ambassador, fostering effective communication on compliance matters across the organisation.
• Facilitate open communication between stakeholders, using feedback to drive improvements in services, products, and systems.
• Identify potential risk events, quantify, and document the probability of occurrence and impact on the business.

Qualifications & Experience (mandatory)

• Audit and compliance background with a solid understanding of SOX
• Experience with recognised compliance frameworks such as ISO27001, ISO31000
• Proficiency with the Onetrust platform and demonstrated ability to manage ICT contracts and vendor onboarding
• Experience in coordinating compliance audits and effectively addressing emerging issues
• Proven ability to implement risk mitigation controls within a complex organisation
• Driver’s License
• Working with Children Check (can be obtained throughout recruitment process)

Ready to take the next step in your career? Join us at OAC and be part of a team that values innovation, collaboration, and excellence. Apply now and contribute to shaping a secure and compliant future for Our Amazing Company!
OAC is an equal opportunity employer. We encourage applications from candidates of all backgrounds and experiences.
Recruitment Agencies – thank you for your interest but we are not looking for support, though you can email andy.martin@oac.edu.au where I will retain your details for future reference.