About the Role
As the GRC Program Manager, you will be the sole custodian and operator of Deputy’s integrated governance program, leveraging AI. This is a highly impactful, hands-on role requiring a blend of strategic framework design and daily execution. You will be responsible for building, running, and maintaining programs across Security, Privacy, AI Governance, and Data Governance, while executing core security certifications and managing compliance workflows.
Responsibilities
- Design, implement, and monitor internal controls for ISO 42001 (AI) and ISO 27001 certifications, and adherence to NIST AI and Privacy Frameworks.
- Act as the primary coordinator for all internal and external audits, including evidence collection, control testing, and remediation tracking.
- Own and execute the daily operational GRC pipeline, leveraging AI-driven automation tools for vendor risk assessments and customer security questionnaires.
- Embed directly into product and engineering lifecycles at the initiation phase, translating business targets into GRC requirements.
- Author, update, and roll out company policies associated with data protection, privacy-by-design, and ethical AI utilization.
- Align risk and compliance activities with Deputy's broader operational goals.
- Perform comprehensive, cross-functional risk assessments on new systems, internal operations, and product features, providing actionable mitigation steps.
- Serve as the point of escalation for compliance-related customer security inquiries, maintaining standard response repositories to accelerate sales velocity.
Requirements
- 5+ years of hands-on experience in GRC roles within a fast-paced SaaS environment.
- Proven track record of executing audits and building compliance workflows from scratch.
- Demonstrated ability to pivot seamlessly between high-level policy writing and granular evidence collection.
- Comfortable operating as an individual contributor who owns both strategy and administrative execution.
- Strong working knowledge of ISO 27001, SOC2, PCI-DSS, and emerging international standards such as ISO 42001 (AI).
- Exceptional active listening and interpersonal skills.
- Demonstrated ability to influence cross-functional decisions.
- Ability to adapt strategies to company priorities.
Skills
- GRC
- SaaS
- Audits
- Compliance workflows
- Policy writing
- Evidence collection
- Strategy execution
- Administrative execution
- ISO 27001
- SOC2
- PCI-DSS
- ISO 42001 (AI)
- NIST AI Framework
- NIST Privacy Framework
- AI Governance
- Data Governance
- Security
- Privacy
- Risk assessments
- Communication
- Interpersonal skills
- Stakeholder management
Location
- Sydney
- Melbourne
- San Francisco
- London
- Remote (United States)
Work Type
- Hybrid
- Remote
Experience Level
- 5+ years
Education Level
- Advanced certifications reflecting both security and privacy execution are highly preferred (CISSP, CIPP/E, CIPM, CISA, CISM, or CRISC).
Benefits
- Flexible work policy
- Work-from-home stipend
- Employee Share Ownership Plan (ESOP)
- Paid parental leave
- Group Salary Continuance Insurance
- Employee Assistance Program
- Additional leave days (study assistance, celebration days, volunteering)
- Global working groups
- Annual Hackathons
- Novated leasing for electric vehicles
- Internet reimbursement
About the Company
- Deputy is a global SaaS workforce management company with hubs in Sydney, Melbourne, San Francisco and London, plus team members working remotely across the United States.
- Our platform serves over 1.5 million workers and 375,000 workplaces across 100+ countries.
- We are backed by top global investors and recently achieved Unicorn status.
- At Deputy, we’re improving the world of work, one shift at a time, for 80% of the world’s workforce: hourly workers.
- We are becoming an AI-native company, a commitment that means you'll be empowered (and expected) to use AI tools and thinking in your day-to-day work.
- You'll have the training, support, and freedom to use AI responsibly and creatively to spark ideas, solve problems faster, and unlock new ways of working.
- If you’re passionate about creating solutions that put people first and helping businesses and their teams thrive, join us at Deputy and make an impact where it matters most!
Equal Opportunity
- Deputy believes in equal opportunity and that inclusiveness and diversity promotes innovation.
- Our global team members are from a variety of cultures.
- We welcome different perspective and skills.
