GRC Analyst

Tasks

• Coordinate remediation follow ups
• Coordinate with external auditors
• Handle vendor security and compliance requests
• Maintain compliance documentation
• Maintain continuous evidence collection
• Maintain policy lifecycle updates
• Manage audit readiness
• Manage policy exceptions
• Manage security questionnaires
• Operationalize compliance controls
• Perform control monitoring
• Respond to RFP security requirements
• Support enterprise risk and compliance programs
• Support security awareness initiatives
• Support vulnerability management processes
• Track policy violations

Perks/Benefits

• Annual company retreats
• Co-working spaces
• Flexible time off
• Fully remote
• Global team gatherings
• High quality equipment provided
• Home office setup support
• Learning and development budget
• Private medical insurance

Skills/Tech-stack

AI Act | Audit Readiness | Continuous Control Monitoring | Continuous control | Control monitoring | DORA | Drata | EU AI | EU AI Act | Evidence management | GDPR | GRC platforms | Governance Risk | Governance risk compliance | ISO 27001 | NIS2 | OneTrust | PCI DSS | Policy governance | Risk Assessments | Risk Management | Risk compliance | SOC 2 | Security Questionnaires | Third Party | Third-Party Risk | Third-party risk management | Vanta | Vendor Risk | Vendor risk assessments