Luxury Escapes is an in-person company. You’ll work from our Barangaroo office, a short walk from Wynyard station and close to great cafés.

Job Description

Our Information Security Management System is documented and operating, and we’re completing ISO 27001 certification in the first half of 2027. You’ll support the programme through certification, then own the ongoing assurance cycle, including annual surveillance audits and three-yearly recertification.

This is our first dedicated information security hire. You’ll own the ISMS and coordinate its certification and ongoing assurance, working with executives, system owners, Engineering, IT, our Principal Architect and an external Data Protection Officer.

You’ll set direction and coordinate the work, while staying close to the detail: maintaining the risk and compliance framework, organising assurance activities and helping teams understand their responsibilities.

Own the ISMS and certification programme

• Maintain the ISMS scope, Statement of Applicability, policies and supporting evidence.
• Support the Stage 1 and Stage 2 ISO 27001 audits; coordinate internal and external audits, findings and corrective actions.
• Lead management reviews and report ISMS performance to the ISMS Governance Council.

Manage risk and assuranceWhat You'll Be Doing:

As our GRC Analyst, you'll help keep DuluxGroup secure by making governance, risk and compliance work feel practical and easy for the business. Your work will be split between running reviews and building relationships, with plenty of room to grow into broader security work.

• Deliver control testing and assurance reviews (e.g. SOX and J-SOX), applying your assurance skills across different control frameworks
• Complete third-party vendor security reviews and support data privacy impact assessments
• Partner with teams across the business, guiding stakeholders through assessments with a "how can I help" approach
• Contribute to wider cyber security initiatives as the role develops
• Find better ways to run our GRC processes and the technology that supports them
• 
  

Our Benefits:

• Exclusive discounts on DuluxGroup products and partner offers
• Stay active anytime, anywhere through our partnership with Fitness Passport
• 20 weeks paid parental leave (primary carers) and 2 weeks partner leave from day one
• Market leading learning, development and career pathways
• Access to our Wellbeing Hub and full EAP support
• 
  
• What We're Looking for: