GRC Analyst

Tasks

• Coordinate with external auditors
• Handle exceptions and remediation follow ups
• Handle vendor security questionnaires
• Maintain evidence collection
• Manage RFP responses
• Manage audit readiness activities
• Manage policy lifecycle updates
• Operationalize compliance controls with engineering
• Perform control monitoring
• Respond to security questionnaires
• Strengthen vulnerability management processes
• Support certification efforts
• Support enterprise risk and compliance programs
• Track policy violations

Perks/Benefits

• Annual retreats
• Co-working spaces access
• Flexible time off
• Fully remote
• Global team gatherings
• High quality equipment provided
• Home office setup support
• Learning and development budget
• Private medical insurance
• Workations

Skills/Tech-stack

AI Act | Access reviews | Audit Readiness | Compliance platforms | Continuous Control Monitoring | Continuous control | Control monitoring | DORA | Drata | Due Diligence | EU AI | EU AI Act | Evidence management | GDPR | Governance Risk | Governance risk compliance | IAM | ISO 27001 | NIS2 | OneTrust | PCI DSS | Policy governance | Risk Management | Risk compliance | SOC 2 | Security Questionnaires | Security assurance | Third Party | Third-party due diligence | Vanta | Vendor Risk | Vendor risk management