Inside Tic:Toc: Bradley, Risk and Compliance Manager
3 min read
We chat with Tic:Toc's Risk and Compliance Manager, Bradley to talk about his role at Tic:Toc and his career journey so far.
I've transitioned through a few different roles throughout my time at Tic:Toc. I think that is the good thing about working in a startup — there are a lot more opportunities to move around.
When I first applied for Tic:Toc I saw the advertisement on Seek. The only reason I read the position description was because a few days before I was talking to a friend who said “You know, it would be really good to get into a startup…” I agreed with him, and then by chance, the Tic:Toc System Administrator role showed up in my feed. That was the first role I did at Tic:Toc before I changed roles to Infrastructure Manager.
After a year and a half as Infrastructure Manager, I transitioned to a role in Risk and Compliance. I knew a position was coming and I had been working as a secretary on the Security Committee. I put myself out there and talked to the CFO who would be heading up the Risk and Compliance team and showed my interest and asked what he would like from me. It was one of those situations where I needed to grab the opportunity rather than expect it to just be handed to me.
I am the Risk and Compliance Manager. My role is not so much the management of individual risks but to provide tools, frameworks and consultation on risk management to the business.
I have moved from a very operational role to a very strategic role, so it has challenged my way of thinking, but that was part of the allure of the role: to move away from that operational part of the business.
We have had the opportunity to use some new services that Tic:Toc would not normally sign up for. And due to some of the assessments I have completed, we have been able to understand the risks, the data used and how it would be secured safely. Using this data we can make better decisions on whether to utilise these services or not. These services have had great benefit to the business, so showing that risk can be an enabler is a great reward.
A lot of businesses fall into the rut that Risk and Compliance are just there to ‘swing the big stick’. I have heard other people call risk departments the ‘Business Inhibitor department’. Unfortunately, this is probably less a misconception and more of an accurate stereotype for some businesses. For me, I did not want this to be the case for Tic:Toc. I wanted the role to be an enabler for the business, be there to provide insights, get people to think from a different perspective and increase the amount of data they have when it comes to making business decisions.
Though I am in the risk profession I am still a technical person at heart. I have a keen interest in Cyber Security (which is a risk consideration). At the moment I am listening to a podcast called ‘Darknet Diaries’ in which the host talks about amazing hacks, and interviews people involved in the hacks such as Cyber Security Professionals, journalists and in some cases hackers themselves. He dives deep into why hackers and professionals got into the industry and what they do. The host is an amazing storyteller.
I have just started archery and I am enjoying it so much! I get a real sense of achievement when I have a good shot. I enjoy it so much because the techniques seem to sink in quickly and it was not as expensive to get started as I thought. I also think there is a hidden desire to be Robin Hood which I think is the reason most people get into it!
Chilled and in a Red Bull can.
Technical for sure, and this frustrates my creative side. I have spikes in the need to be creative and sometimes it's successful and sometimes (in my eyes) it’s not. The technical side of me comes much more naturally.