Cyber Assurance and GRC Manager

Job Description

Endeavour Group Endeavour Group is Australia’s largest retail drinks network & portfolio of licensed hotels. Find information for employees, community, investors, suppliers & industry. Let’s create a more sociable future together At Endeavour, we’re totally into what we do. With a portfolio that includes Dan Murphy’s, BWS, ALH Hotels, Pinnacle Drinks and more, we love to bring people together. Together we share our passion for our products and industry; it’s what inspires us to dream big, and continue to create new experiences for our customers and teams across Australia. If you thrive on positive energy, we want to meet you! Job Description The Cyber Assurance and GRC (Governance, Risk, and Compliance) Manager will be responsible for overseeing and leading the cyber assurance and GRC function. This role requires a strategic thinker who can drive effective and efficient governance, risk management, and security assurance across the organization. This role will be responsible for shaping the governance frameworks, leading risk assessments, managing compliance initiatives, and ensuring continuous improvement in our security posture. Governance, Risk, and Compliance (GRC): Lead the development, implementation, and management of security policies, standards, procedures, and guidelines to ensure alignment with regulatory requirements and industry standards (e.g., NIST). Conduct and oversee enterprise-wide risk assessments, control evaluations, and compliance audits. Lead efforts in identifying and addressing cybersecurity risks, working closely with various stakeholders to implement remediation strategies. Monitor changes in regulations and industry standards, ensuring the organization's GRC practices remain compliant. Report on key risks, metrics, and the effectiveness of the risk management program to senior leadership. Security Assurance: Develop and manage the cybersecurity assurance program, ensuring the effectiveness of controls and mitigation strategies. Coordinate internal and external audits, including vulnerability assessments and penetration tests. Drive continuous improvement efforts for security assurance processes, including the identification of security gaps, assessing control effectiveness, and remediation tracking. Qualifications Bachelor's degree in Computer Science, Information Technology, or a related field. 7+ years of experience in cybersecurity governance, risk management, and compliance, with at least 3 years in a leadership or managerial role. Proven experience managing GRC frameworks and conducting security assurance activities. Strong knowledge of industry standards and regulatory requirements (e.g., ISO, NIST, PCI-DSS). Experience with audits and working with external auditors and regulators. Benefits We offer flexible working in every sense. An exclusive discount card for BWS, Dan Murphy’s, Woolworths, BIG W and other Endeavour Group brands, including our ALH pubs. Monthly meeting-free days. Your health and wellbeing is your most important asset, and as one of our valued team members, it’s our first priority. You will have a range of free services to help you live well and support your physical, mental and financial wellbeing. Endeavour Group is full of opportunities - use our dedicated learning and development options to grow an idea, yourself, and your career. At Endeavour, we value being a workplace where everyone’s welcome - if you meet a number of the requirements (and not all), we encourage you to apply. Additional Information We are together creators With a portfolio that includes Dan Murphy’s, BWS, ALH Hotels, Pinnacle Drinks and more, Endeavour Group is big on sociability. Together we create the moments that bring millions of people together. And together we have more fun, create more opportunities, and score a lot more goals. We’re serious about creating a safe, inclusive and fun place to rock up to where equal opportunity is key, and flexibility is part of how we roll. We’re all about creating a more sociable future - for our customers and each other. If this job excites you - and you’re close-enough on the requirements, reach out, we’d love to hear from you. #J-18808-Ljbffr