Deputy is a global SaaS workforce management company with hubs in Sydney, Melbourne, San Francisco and London, plus team members working remotely across the United States.Our platform serves over 1.5 million workers and 375,000 workplaces across 100+ countries. We are backed by top global investors and recently achieved Unicorn status.
At Deputy, we’re improving the world of work, one shift at a time, for 80% of the world’s workforce: hourly workers. These are the dedicated employees who keep our world running – from baristas to nurses, cleaners to delivery drivers, florists to factory workers. Despite their vital role in society, most workplace technology has focused on those workers who sit behind a desk, but at Deputy, we transform the frontline. When businesses use Deputy, their workplaces thrive – the business is more profitable, compliant, and productive, while the workers are more engaged and happier at work.
We're becoming an AI-native company, a commitment that means you'll be empowered (and expected) to use AI tools and thinking in your day-to-day work. You'll have the training, support, and freedom to use AI responsibly and creatively to spark ideas, solve problems faster, and unlock new ways of working.
If you’re passionate about creating solutions that put people first and helping businesses and their teams thrive, join us at Deputy and make an impact where it matters most!
The Role
As the GRC Program Manager, you will be empowered with AI to be the sole custodian and operator of Deputy’s integrated governance program. This is a highly impactful, "hands-on" role that requires a unique blend of strategic framework design and tactical, daily execution.
Reporting to the Senior Director of Security, you will be a true GRC Swiss Army Knife—responsible for building, running, and maintaining our comprehensive programs across Security, Privacy, AI Governance, and Data Governance, while simultaneously executing core security certifications (ISO 27001, SOC2, PCI-DSS) and managing high-volume compliance workflows.
Responsibilities
Skills & Experience
- Experience: 5+ years of hands-on experience in GRC roles within a fast-paced SaaS environment, with a proven track record of executing audits and building compliance workflows from scratch.
- The "Swiss Army Knife" Mindset: Demonstrated ability to pivot seamlessly between high-level policy writing and granular evidence collection; comfortable operating as an individual contributor who owns both strategy and administrative execution.
- Framework Expertise: Strong working knowledge of ISO 27001, SOC2, PCI-DSS, and emerging international standards such as ISO 42001 (AI).
- Communication: Exceptional active listening and interpersonal skills, with a demonstrated ability to influence cross-functional decisions and "read the room" to adapt strategies to company priorities.
- Nice to have - Certifications: Advanced certifications reflecting both security and privacy execution are highly preferred (CISSP, CIPP/E, CIPM, CISA, CISM, or CRISC).
Employee Perks
- Enjoy a flexible work policy (with a work-from-home stipend to set you up for success!)
- Own A piece of Deputy via our Employee Share Ownership Plan (ESOP)
- Take paid parental leave to support you and your family
- Stay protected with Group Salary Continuance Insurance
- Access support through our Employee Assistance Program
- Enjoy additional leave days — including study assistance, celebration days and volunteering
- Join our global working groups focused on collaboration, belonging and connection
- Get creative at our annual Hackathons
- Take advantage of our novated leasing for electric vehicles, internet reimbursement and more!
Deputy believes in equal opportunity and that inclusiveness and diversity promotes innovation. Our global team members are from a variety of cultures. And we welcome different perspective and skills.
#LI-Hybrid
