Security GRC Specialist

Who we are

Employment Hero is on a mission to make employment easier and more valuable for everyone. Our Employment Operating System brings hiring, HR, payroll and benefits into an all-in-one solution.

Since our inception in 2014, we’ve scaled to a $2 billion valuation and gained a presence in 6 countries globally - Australia, New Zealand, Singapore, Malaysia, the UK and Canada. We now service over 300,000 businesses and more than 2 million employees.

The EH Way

At Employment Hero, we’re proud of our unique DNA, which we call The EH Way.  

1. We are Mission First - everything we do (from what we work on, to how we allocate capital and where we focus) is driven by our Mission
2. We are Remote First - we champion a remote environment with a preference for asynchronous communication and a high degree of autonomy
3. We are AI First - we are committed to using AI to accelerate our mission; AI is not just a tool, it’s a fundamental part of how we operate, innovate, and scale
4. We are Apolitical - we do not take a position on political or social topics, unless it relates to our Mission
5. We Live by Our Values - we role model our values 100% of the time
6. We Expect High Performance - we set a high standard and we’re not satisfied with being average

This role

As our Security GRC Specialist, you’ll be working with the Global Security GRC Team and will be instrumental in shaping the information security management strategy for Employment Hero.

Your key focus areas will be:

• Operate the information security management system across Employment Hero.
• Develop and execute a holistic information security strategy that aligns with the company's objectives and effectively mitigates cyber threats.
• Write and maintain information security policies to ensure compliance and the protection of sensitive data.
• Support the improvement and management of our cyber security capabilities.
• Stay up to date with the latest cybersecurity threats, trends, and technologies, and proactively recommend enhancements to the company's security posture.
• Collaborate with internal stakeholders, including IT, product, legal, and engineering teams, to identify security requirements and implement appropriate controls and safeguards.
• Respond to compliance audit requests and demonstrate a strong understanding of compliance frameworks and regulations such as ISO27001, SOC2.
• Conduct internal audits and provide recommendations to key stakeholders based on findings.
• Implement and maintain security tools and systems to ensure optimal performance and address evolving threats