Cyber Assurance and GRC Manager

Let’s create a more sociable future together

At Endeavour, we’re totally into what we do. With a portfolio that includes Dan Murphy’s, BWS, ALH Hotels, Pinnacle Drinks and more, we love to bring people together. Together we share our passion for our products and industry; it’s what inspires us to dream big, and continue to create new experiences for our customers and teams across Australia. If you thrive on positive energy, we want to meet you!

• Bring your passion and feel the energy 
• Flexible working
• Group discounts 

The Cyber Assurance and GRC (Governance, Risk, and Compliance) Manager will be responsible for overseeing and leading the cyber assurance and GRC function. This role requires a strategic thinker who can drive effective and efficient governance, risk management, and security assurance across the organization. 

This role will be responsible for shaping the governance frameworks, lead risk assessments, manage compliance initiatives, and ensure continuous improvement in our security posture. 

Sound good? Read on.

Here is a taster of what you can expect in this role:

• Governance, Risk, and Compliance (GRC):

  • Lead the development, implementation, and management of security policies, standards, procedures, and guidelines to ensure alignment with regulatory requirements and industry standards (e.g., NIST).

  • Conduct and oversee enterprise-wide risk assessments, control evaluations, and compliance audits.

  • Lead efforts in identifying and addressing cybersecurity risks, working closely with various stakeholders to implement remediation strategies.

  • Monitor changes in regulations and industry standards, ensuring the organization's GRC practices remain compliant.

  • Report on key risks, metrics, and the effectiveness of the risk management program to senior leadership.

• Security Assurance:

  • Develop and manage the cybersecurity assurance program, ensuring the effectiveness of controls and mitigation strategies.

  • Coordinate internal and external audits, including vulnerability assessments and penetration tests.

  • Drive continuous improvement efforts for security assurance processes, including the identification of security gaps, assessing control effectiveness, and remediation tracking.

Now let’s talk about you: 

• Bachelor's degree in Computer Science, Information Technology, or a related field.

• 7+ years of experience in cybersecurity governance, risk management, and compliance, with at least 3 years in a leadership or managerial role.

• Proven experience managing GRC frameworks and conducting security assurance activities.

• Strong knowledge of industry standards and regulatory requirements (e.g., ISO, NIST, PCI-DSS).

• Experience with audits and working with external auditors and regulators.

The benefits are good too! 

• We offer flexible working in every sense
• An exclusive discount card for BWS, Dan Murphy’s, Woolworths, BIG W and other Endeavour Group brands, including our ALH pubs
• Monthly meeting-free days 
• Your health and wellbeing is your most important asset, and as one of our valued team members, it’s our first priority. You will have a range of free services to help you live well and support your physical, mental and financial wellbeing
• Endeavour Group is full of opportunities - use our dedicated learning and development options to grow an idea, yourself, and your career. This is just the start, so dream big.

At Endeavour, we value being a workplace where everyone’s welcome - if you meet a number of the requirements (and not all), we encourage you to apply.

We are together creators

With a portfolio that includes Dan Murphy’s, BWS, ALH Hotels, Pinnacle Drinks and more, Endeavour Group is big on sociability. Together we create the moments that bring millions of people together. And together we have more fun, create more opportunities, and score a lot more goals. We’re serious about creating a safe, inclusive and fun place to rock up to where equal opportunity is key, and flexibility is part of how we roll.  

We’re all about creating a more sociable future - for our customers and each other. If this job excites you - and you’re close-enough on the requirements, reach out, we’d love to hear from you.

You can learn more about working with us on LinkedIn or at endeavourgroupcareers.com.au.

Our Talent Team and Hiring Leaders kindly request no unsolicited resumes or approaches from Recruitment Agencies. Endeavour Group is not responsible for any fees related to unsolicited resumes.

#WeAreTogetherCreators #ComeAsYouAre #DreamBig #FeelTheEnergy #LeaveYourMark #EndeavourGroup