Security GRC Manager – Remote

Who we are

Employment Hero is on a mission to make employment easier and more valuable for everyone around the world. Our Employment Operating System brings hiring, HR, payroll and benefits into an all-in-one solution.

Since launching in 2014, we’ve grown from startup to global scale, reaching a valuation of over $2 billion and building a presence across six countries, with even more growth ahead. We now serve over 350,000 SMEs, pay more than 3 million employees, and support a growing pool of job seekers finding their next role through our platform.

The EH Way

At Employment Hero, we’re proud of our unique DNA, which we call The EH Way.

• We are Mission First – Our Mission determines what we work on, where we invest, and where we focus. Every decision runs through a single filter: does this accelerate our Mission?
• We are Remote First – we champion a remote environment with a preference for asynchronous communication and a high degree of autonomy
• We are AI First – we are committed to using AI to accelerate our mission; AI is not just a tool, it’s a fundamental part of how we operate, innovate, and scale
• We Live by Our Values – we role model our values 100% of the time
• We Expect High Performance – we set a high standard and we’re not satisfied with being average

This role

As our Security GRC Manager, you’ll be working with internal stakeholders (IT, legal, compliance, product, engineering) and will be instrumental in shaping the organisation’s information security and GRC strategy to proactively mitigate security risks.

Working schedule: Monday – Friday, 8:30am – 5:30pm

Salary range: $140,000 – $160,000

Your key focus areas will be

• Develop and drive the organisation’s overarching information security and GRC strategy in alignment with business objectives.
• Oversee security governance processes, risk management frameworks, and compliance programs (e.g., ISO 27001, SOC2).
• Lead internal and external security audits, ensuring all compliance requirements and deadlines are met.
• Establish, maintain, and enforce high-level information security policies, procedures, and standards.

This will include

• Lead and manage a team of Security GRC professionals, providing guidance, mentorship, and professional development support.
• Serve as the primary liaison between internal stakeholders (IT, legal, compliance, product, engineering) to drive security initiatives and foster a security-conscious culture.
• Lead regular risk assessments, vulnerability assessments, and audits, providing strategic recommendations to senior leadership.
• Oversee and guide security incident responses, ensuring rapid remediation, effective communication, and root cause analysis.
• Establish security training programs to ensure employees across all levels understand their role in maintaining information security.
• Monitor emerging trends in information security and implement continuous improvements to safeguard data and assets.

Who you are

To thrive at Employment Hero, you’ll need to embody The EH Way – operating with focus, agility, and an obsession with impact. For this role, you’ll also bring

• Degree in information technology, information security, risk management, or equivalent work experience (industry certifications like CISSP, CISM, or CISA are highly desirable).
• Proven ability to lead and manage a team, with strong consultative, written, and verbal communication skills to influence stakeholders across all organisational levels.
• Demonstrated knowledge and understanding of contemporary frameworks and methodologies (e.g., ISO 27001, NIST 800-53, SOC2).
• Broad knowledge of current Governance, Risk, and Compliance (GRC) technological tools and methodologies.
• Ability to work autonomously with a strong focus on continuous improvement and constructively challenging the status quo.
• Strong consultative skills to effectively communicate complex technical concepts to both technical and non-technical audiences, paired with meticulous attention to detail and a strong desire to learn.

What we can offer

At Employment Hero, we don’t just talk about a better way to work. We live it.

Joining Employment Hero means you’ll:

• Work in a remote-first environment, giving you the autonomy to do your best work while delivering meaningful outcomes.
• Be trusted to own your work, make decisions, and have a real impact from day one.
• Access cutting-edge AI tools and technology that help you move faster, think bigger, and amplify your expertise.
• Surround yourself with ambitious, high-performing teammates who will challenge, support and inspire you to do the best work of your career.
• Own ESOP (Employee Share Options) in one of the world’s fastest-growing technology companies, so you can share in the value you help create.
• Enjoy a comprehensive benefits package, including generous parental leave, subsidised egg freezing, a home office allowance, and outstanding learning and development opportunities to support your growth.
• Connect with colleagues from around the world at our Annual Global Gathering. We’ve celebrated together in Thailand, Vietnam, Bali and Dubai, and can’t wait to meet in the Gold Coast, Australia, in September 2026.

Privacy and AI Notices

We’re AI-first, so may use AI tools to review your applications and support our interviewing and hiring process. They help us cut the noise, surface great talent fast and make sure every candidate gets a fair, consistent experience. These tools do not replace human judgment and the final hiring decision sits with our team.

We verify candidate identity and location as part of our hiring process.

At Employment Hero, we are committed to safeguarding the privacy of your application data. By applying to this role, you acknowledge our Applicant Privacy Policy made available here: employmenthero.com/legals/applicant-policy/.