HQ - GRC Senior Analyst

📋 Description

• Own and lead the company’s GRC implementation across ISO 27001 and GDPR.
• Build and manage the Information Security Management System (ISMS) aligned with ISO 27001.
• Ensure GDPR compliance across all data processing activities, including data mapping, data leaks
• Act as the primary point of contact for auditors and prepare the company for ISO audits.
• Identify compliance gaps and drive remediation plans with technical and non-technical teams.
• Develop governance policies, procedures, and risk management frameworks.

🎯 Requirements

• 8+ years of experience in GRC, Risk, Compliance, or IT Audit roles
• 5+ years of strong hands-on experience with ISO 27001 and experience managing or supporting ISMS
• 3+ years of practical experience with GDPR data mapping, reviewing systems from the tech side.
• 5+ years of experience from a product tech company with global client reach in the US & EU
• Experience working with internal and external auditors
• Very strong stakeholder management and communication skills across technical and non-technical