GRC speciālists / GRC Specialist (Information Security & Privacy)

📋 Description

• Support our Information Security Management System (ISMS), including ISO 27001 audits and
• Coordinate risk assessments, vulnerability scanning and penetration testing with relevant teams
• Support Data Protection Impact Assessments (DPIAs), privacy risk assessments, and the maintenance
• Help prepare for external audits, including ISAE 3402/SOC 1 and IT financial audits, by
• Maintain and improve security policies, privacy standards, procedures and supporting documentation.
• Work with technical and business stakeholders to identify risks, explain requirements and agree on

🎯 Requirements

• Practical experience in GRC, information security, audit, risk management or data privacy, ideally
• A working understanding of ISO 27001, ISMS principles and how organizations assess risks and
• Experience supporting audits, risk assessments or compliance activities.
• An understanding of data protection principles and an interest in developing your privacy expertise.
• Strong organizational skills, attention to detail and the ability to follow up on actions across
• Clear spoken and written English, with confidence communicating with both technical and business

🎁 Benefits

• Gross monthly salary from 3,200 EUR to 4,200 EUR, depending on your experience and qualifications.
• An environment that encourages new ideas and practical improvements, supported by the stability and
• The opportunity to work with international colleagues across Information Security, IT, Legal and
• Opportunities to develop your expertise across GRC and data privacy, with potential involvement in
• A hybrid working model, combining collaboration in our Riga office with remote work.
• Health insurance, a contemporary office environment, development opportunities, hackathons and