GRC Analyst

Tasks

• Collect evidence continuously
• Coordinate external auditors
• Handle security questionnaires
• Maintain compliance documentation
• Maintain continuous compliance posture
• Maintain policy lifecycle
• Manage audit readiness
• Manage remediation follow ups
• Manage vendor risk assessments
• Monitor controls continuously
• Operationalize controls with engineering and security
• Perform third party due diligence
• Respond to RFPs
• Strengthen vulnerability management processes
• Support enterprise risk and compliance programs
• Support security awareness initiatives
• Track exceptions and violations

Perks/Benefits

• Annual retreats
• Co-working spaces access
• Company equipment provided
• Flexible time off
• Fully remote
• Global team gatherings
• Home office setup support
• Learning and development budget
• Private medical insurance
• Workations

Skills/Tech-stack

AI Act | Continuous Control Monitoring | Continuous control | Control monitoring | DORA | Drata | EU AI | EU AI Act | Evidence management | Exception management | GDPR | GRC platforms | Governance Risk | Governance risk compliance | ISO 27001 | NIS2 | OneTrust | PCI DSS | Policy Management | RFP Response | Remediation Tracking | Risk Management | Risk compliance | SOC 2 | Security Questionnaire | Third Party | Third-Party Risk | Vanta | Vendor Risk | Vendor risk management | Vulnerability Management