Senior Information Security Specialist
Employment Hero, Australia
Job Description
Employment Hero is an Australian tech unicorn - valued at over $1.25 billion. Our world-class software is the easiest way for small and medium-sized businesses to manage HR, payroll, employee engagement, and benefits. We’ve grown 100% year-on-year since our inception in 2014, and now service over 200,000 businesses and 1 million+ active users globally. We have exciting growth plans for 2023 and beyond, powered by our mission of making employment easier and more valuable for everyone.
We take a Remote First approach with our team. Employment Hero can hire across the world, so long as candidates have eligible working rights and are in a suitable timezone to their colleagues. If you’ve got the skills for the role and the passion for our mission then we want to hear from you!
Employment Hero celebrates diverse perspectives and experiences, we invite people of all backgrounds and identities to apply for this position.
About the role:
You will be part of a dynamic business that challenges the status quo and sets the benchmark for others to follow. You'll be part of an open, team-oriented and rewards-based culture where your input is encouraged and your success is rewarded! We're entering an exciting period of change and we're on the lookout for an Senior Information Security Specialist, a perfectionist by nature, and someone who loves tech, IT amp; to provide the tools necessary to make people feel happy. You will also have an interest in pursuing and supporting the security function and needs of the business.
Responsibilities:
- Operate the information security management system across Employment Hero.
- Develop and execute a holistic information security strategy that aligns with the company's objectives and effectively mitigates cyber threats.
- Write and maintain information security policies to ensure compliance and the protection of sensitive data.
- Support the improvement and management of our cyber security capabilities.
- Stay up to date with the latest cybersecurity threats, trends, and technologies, and proactively recommend enhancements to the company's security posture.
- Collaborate with internal stakeholders, including IT, legal, and risk management teams, to identify security requirements and implement appropriate controls and safeguards.
- Respond to compliance audit requests and demonstrate a strong understanding of compliance frameworks and regulations such as ISO27001, NIST, and CPS234.
- Conduct internal audits and provide recommendations to key stakeholders based on findings.
Requirements:
- A degree in information technology, information security, risk management, or equivalent work experience.
- Industry certifications such as CISSP, CISM or CISA are highly desirable
- Demonstrated knowledge and understanding of contemporary frameworks and methodologies, such as ISO 27001, NIST 800-53, NIST Cyber Security Framework (CSF), and Australian Information Security Manual (ISM).
- Excellent written, oral, and influencing skills with the ability to work autonomously.
- A strong focus on continuous improvement, with a proven ability to challenge the status quo constructively.
- Broad knowledge of current Governance, Risk and Compliance (GRC) technological tools and methodologies.
- Strong consultative skills, enabling effective communication of complex concepts to both technical and non-technical audiences.
- Meticulous attention to detail.
- A strong desire to learn and expand knowledge in the field of information security.
Benefits:
- Self, health, wealth and happiness programs
- Remote first and flexible working arrangements
- A generous budget to spend on setting up your home office (if you need a desk, chair, or screen? We’ve got you covered!)
- We set you up for success with the latest and greatest hardware, tools and tech
- Learning amp; development (including an external study policy, live monthly professional development classrooms, and premium online learning content!)
- Social events to get to know your new colleagues
- Employee Share Option Program: be an owner of Employment Hero!
Why join Employment Hero?
* Raised $181M achieving unicorn status February 2022
* LinkedIn Top 25 Startups 2021, ranked #2 in Australia
* The Australian Top 100 Innovators List 2021
* Raised $140M Series E round led by Insight Partners July 2021
* Raised $45M Series D round led by Seek 2021
* Deloitte Technology Fast 50 2020, ranked #42 in Australia
* LinkedIn Top 10 Startups 2020
* Raised $22M Series C Round led by Seek July 2019
* Raised $8 mill series B round led by Seek and OneVentures
* Deloitte Technology Fast 50