Who we are
Employment Hero is on a mission to make employment easier and more valuable for everyone. Our Employment Operating System brings hiring, HR, payroll and benefits into an all-in-one solution.
Since our inception in 2014, we’ve scaled to a $2 billion valuation and gained a presence in 6 countries globally - Australia, New Zealand, Singapore, Malaysia, the UK and Canada. We now service over 300,000 businesses and more than 2 million employees.
The EH Way
At Employment Hero, we’re proud of our unique DNA, which we call The EH Way.
- We are Mission First - everything we do (from what we work on, to how we allocate capital and where we focus) is driven by our Mission
- We are Remote First - we champion a remote environment with a preference for asynchronous communication and a high degree of autonomy
- We are AI First - we are committed to using AI to accelerate our mission; AI is not just a tool, it’s a fundamental part of how we operate, innovate, and scale
- We Live by Our Values - we role model our values 100% of the time
- We Expect High Performance - we set a high standard and we’re not satisfied with being average
This role
As a Security GRC Analyst, you'll be working with our Information Security department. In this build-centric and technical position, you will be instrumental in shaping engineering the integrations, tooling, and automation that power our GRC program. You will collaborate with our GRC Specialist (Audit) to ensure our compliance is continuous, verifiable, and automated, reducing manual effort across the board.
Moving beyond basic checklists, this role offers true ownership of our compliance automation from the start. You will transform control monitoring and evidence gathering into functional code while integrating the core systems that support our certifications. This is an ideal opportunity for an engineer with a compliance background, or a GRC expert who enjoys building, to scale automated security operations within a high-growth environment.
We are looking for candidates who can bridge the gap between technical builds and regulatory requirements; neither a pure developer without a security foundation nor a compliance specialist without coding proficiency will be suitable.
As a GRC Analyst, you will be involved in:
Audit & Compliance Operations
-
Build and extend our in-house GRC automation platform (Python services on cloud infrastructure) that automates evidence collection, control checks, compliance letters and lost-device handling.
- Build and run LLM-based tooling that reviews controls for evidence gaps and routes them to the right owners.
- Own the day-to-day maintenance of Vanta: keep controls current, collect evidence from stakeholders, and manage control statuses across our certification portfolio.
- Support audit preparation across our ISO and SOC 2 programs: prepare documentation, track auditor requests, and keep audit cycles on schedule.
- Coordinate evidence collection and follow-ups with internal teams so that nothing is missed.
- Maintain and report on compliance posture (control health, overdue evidence, vendor review status) to the security team.
Risk & Vendor Support
-
Assist with risk assessments: document, track, and follow up on identified risks in our GRC tooling.
- Support third-party and vendor risk processes: coordinate vendor questionnaires, track review status, and maintain vendor registers.
Policy & BAU
-
Help maintain and review information security policies: flag outdated content, track review cycles, and support updates where needed.
- Assist with broader GRC BAU tasks as the team's needs evolve.
Who you are
To thrive at Employment Hero, you’ll need to embody The EH Way - operating with focus, agility, and an obsession with impact.
- A relevant degree or certification (e.g. CompTIA Security+, ISO 27001, ISO 27701, ISO 42001 Lead Auditor, Certified in Cybersecurity)
- A background in constructing LLM-based solutions and the ability to execute end-to-end automation of manual workflows are highly valued assets.
- 2 - 4 years in a GRC, compliance, or audit role (analyst, coordinator, or similar).
- Experience working in a tech, SaaS, or scale-up environment.
- Familiarity with Vanta or similar compliance automation tools (e.g. Drata, Tugboat Logic) is a strong plus.
- A working understanding of frameworks like ISO 27001 or SOC 2. You do not need to be an expert, but you should know the basics.
- Exposure to privacy or AI governance frameworks such as ISO 27701, 27018, or 42001.
What we can offer
At Employment Hero, we don't just talk about a better way to work. We live it.
Joining Employment Hero means you'll:
-
Work in a remote-first environment, giving you the autonomy to do your best work while delivering meaningful outcomes.
- Be trusted to own your work, make decisions, and have a real impact from day one.
- Access cutting-edge AI tools and technology that help you move faster, think bigger, and amplify your expertise.
- Surround yourself with ambitious, high-performing teammates who will challenge, support and inspire you to do the best work of your career.
- Own ESOP (Employee Share Options) in one of the world's fastest-growing technology companies, so you can share in the value you help create.
- Enjoy a comprehensive benefits package, including generous parental leave, subsidised egg freezing, a home office allowance, and outstanding learning and development opportunities to support your growth.
- Connect with colleagues from around the world at our Annual Global Gathering. We've celebrated together in Thailand, Vietnam, Bali and Dubai, and can't wait to meet in the Gold Coast, Australia, in September 2026.
Privacy and AI Notices
-
We’re AI-first, so may use AI tools to review your applications and support our interviewing and hiring process. They help us cut the noise, surface great talent fast and make sure every candidate gets a fair, consistent experience. These tools do not replace human judgment and the final hiring decision sits with our team.
- We verify candidate identity and location as part of our hiring process.
- At Employment Hero, we are committed to safeguarding the privacy of your application data. By applying to this role, you acknowledge our Applicant Privacy Policy made available here: employmenthero.com/legals/applicant-policy/.
Employment Hero is the world’s first Employment Operating System: an end-to-end system built to make employment easier for everyone. From hired to retired, everything employment is managed in one place. Employment Hero helps over 300,000 businesses worldwide hire great people and manage everything from hiring, HR and payroll, through to rewards, recognition and offboarding —all automated behind the scenes. And for the 2M+ employees and jobseekers using Employment Hero, Employment OS is their work passport to unlock great job opportunities, manage work admin and grow their career.
