Senior GRC Analyst

📋 Description

• Conduct risk assessments and third-party security assessments to identify gaps and vulnerabilities
• Design, implement, and conduct internal audits; report findings to management
• Manage and maintain a GRC platform to track compliance activities
• Collaborate with ISO27001 auditors to ensure audits and certification
• Own risk assessment process; maintain risk, information asset, and incident registers
• Monitor evolving product compliance legislation (EU AI Act, Cyber Resilience Act, RED) and

🎯 Requirements

• Bachelor’s degree or industry certifications in info security, risk mgmt, governance
• 5+ years in information security focusing on governance, risk, compliance
• 3+ years preparing ISO27001 audits and working with auditors
• Thorough understanding of ISO27001:2022
• Experience with GRC platforms such as ISMS.online, Vanta, SecureFrame
• Interpersonal skills with developers, engineers, and stakeholders

🎁 Benefits

• Competitive salary, annual bonus and equity incentive
• Hybrid working (2 days in office), home office support
• Volunteering leave and diverse culture