Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Senior GRC Analyst role.
Rezi rewrites your resume against Luxury Escapes's job description. Free.
Tailor your resume to this Senior GRC Analyst role.
Rezi rewrites your resume against Luxury Escapes's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Senior GRC Analyst posting at Luxury Escapes — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Senior GRC Analyst posting at Luxury Escapes — free, in seconds.
About the Role
Support the ISO 27001 certification program and own the ongoing assurance cycle, including annual surveillance audits and three-yearly recertification. This role will own the Information Security Management System (ISMS) and coordinate its certification and ongoing assurance, working with various stakeholders.
Responsibilities
- Own the ISMS and certification programme
- Maintain the ISMS scope, Statement of Applicability, policies and supporting evidence
- Support the Stage 1 and Stage 2 ISO 27001 audits; coordinate internal and external audits, findings and corrective actions
- Lead management reviews and report ISMS performance to the ISMS Governance Council
- Manage risk and assurance
- Own the risk method, register and treatment tracking, and facilitate assessments with risk owners
- Coordinate recurring assurance, including access reviews, control testing, evidence collection and penetration tests
- Monitor control performance and communicate key exposures, findings and remediation progress
- Oversee compliance, systems and third parties
- Coordinate security and privacy assessments for business systems; maintain the systems inventory
- Manage vendor and sub-processor security assessments, including onboarding and periodic reviews
- Support ISO 27001, PCI DSS and privacy compliance, working with the Data Protection Officer on specialist advice
- Track emerging obligations, including the EU Artificial Intelligence Act, and drive improvements to controls and processes
- Coordinate incidents, awareness and customer assurance
- Maintain the incident response plan, coordinate incidents and track follow-up actions
- Run security awareness and training, and respond to customer questionnaires and due diligence requests
- Coordinate security projects across teams to keep actions on track
Requirements
- Experience running a management system or assurance programme, including evidence and auditor engagement
- Practical information security risk management skills and the ability to build clear ownership across teams
- Working knowledge of PCI DSS and GDPR or comparable privacy obligations
- Experience with third-party security risk and customer assurance requests
- Strong planning, stakeholder management and communication skills, with sound judgement on proportionate controls
- Sydney-based, and in-office are non-negotiables
Skills
- CISM, CISSP, ISO 27001 Lead Implementer or Lead Auditor certification
- Experience in e-commerce, travel, payments or another high-volume consumer environment
- Familiarity with AWS, cloud security, SOC 2, AI governance or ISO 42001
- Working knowledge of security tools and reports, such as EDR, vulnerability management, firewalls, SIEM, Microsoft Entra ID or SaaS access management
- Experience working across jurisdictions and distributed teams
Location
- Barangaroo office
- Sydney
Work Type
- In-person
- Full-time
Salary/Compensations
- Excellent Remuneration package
Benefits
- 20% discount on Luxury Holidays
- Breakfast and lunch are provided 5-days a week
- Health and Well-being programs
- Annual Hackathons!
- 1/2 day birthday bonus leave
- A super collaborative team that enjoys creating great platforms
About the Company
- Be part of the team protecting the experiences our customers love
- Luxury Escapes is a fast-growing travel platform with more than 8 million members.
- Recently winning the award for Most Outstanding Employee Engagement and Recruitment Program at the National Travel Industry Awards!
- Our mission is to create the world’s most loved travel experiences.
- We’re a team of forward-thinking people who challenge the travel industry and ourselves to deliver outstanding experiences.
Equal Opportunity
- We embrace diversity in our people and make hiring decisions based on your experiences and skills.
- We do not discriminate based on gender identity, religion, race, national origin, sexual orientation, age, marital status, or disability status.
- You'll find a collaborative, inclusive, and respectful workplace here at Luxury Escapes, and we are proud to celebrate who you are.
- Please let us know if you require any reasonable adjustments during the interview.
- As a 2026 Circle Back Initiative employer, we're committed to responding to every applicant.