Nearshore Sector | GRC Analyst

📋 Description

• Support the implementation, maintenance, and continuous improvement of the Group Information
• Conduct comprehensive cybersecurity risk assessments and gap analyses on internal systems
• Drive Third-Party Risk Management (TPRM) by evaluating vendors, SaaS applications, and external
• Champion Security by Design by reviewing technical data flows, IAM/MFA requirements, and security
• Draft, review, and maintain Group security policies, procedures, and baseline documentation (PSSI)
• Standardize compliance evidence collection, monitor remediation action plans, and track KPIs across

🎯 Requirements

• 1–3+ years of professional experience in Information Security, Cybersecurity Governance, Risk, and
• Solid understanding of core information security frameworks and European regulations, including
• Practical experience conducting risk assessments, gap analyses, and evaluating third-party vendor
• Working knowledge of core technical security controls, including Identity & Access Management
• Exposure to GRC and vendor risk tools (e.g., ServiceNow GRC, OneTrust, BitSight) is a plus.
• Strong communication skills with the ability to translate complex regulatory and security