GRC Analyst

Tasks

• Assess vendor risk
• Coordinate external audits
• Coordinate risk assessments
• Drive ISO 27001 certification efforts
• Drive remediation follow through
• Govern vulnerability management
• Maintain evidence calendar
• Maintain policies
• Manage policy exceptions
• Manage security awareness training
• Manage security questionnaires
• Monitor policy violations
• Operationalize regulatory frameworks
• Respond to RFPs
• Support compliance tooling and GRC platforms

Perks/Benefits

• Co-working space access
• Company retreat
• Fully remote work
• Home-office equipment
• Learning budget
• Private medical insurance
• Share options
• Uncapped holiday
• Workations

Skills/Tech-stack

AI Act | Audit Readiness | Awareness Training | Compliance Management | Control monitoring | DORA | EU AI | EU AI Act | Evidence management | GDPR | GRC platforms | Governance | ISO 27001 | Information security | NIS2 | PCI DSS | Policy Management | RFP Response | Remediation management | Risk Assessment | Risk Management | SOC 2 | Security Awareness Training | Security Questionnaires | Security awareness | Third Party | Third-Party Risk | Vendor Risk | Vendor Risk Assessment | Vulnerability Management