GRC Analyst

Tasks

• Coordinate external auditors
• Handle security and compliance requests
• Maintain continuous compliance documentation
• Maintain continuous evidence collection
• Maintain policy lifecycle updates
• Manage audit readiness activities
• Manage policy exceptions and violations
• Manage vendor security questionnaires
• Operationalize controls with engineering and security
• Respond to RFPs
• Strengthen vulnerability management processes
• Support enterprise risk and compliance programs
• Support security awareness initiatives
• Track remediation follow ups

Perks/Benefits

• Annual company retreats
• Co-working spaces access
• Flexible time off
• Fully remote
• High quality equipment provided
• Home office setup support
• Learning and development budget
• Private medical insurance
• Workations

Skills/Tech-stack

AI Act | Audit Readiness | Compliance | Continuous Control Monitoring | Continuous control | Control monitoring | DORA | Drata | Due Diligence | EU AI | EU AI Act | Evidence management | GDPR | GRC platforms | Governance | ISO 27001 | NIS2 | OneTrust | PCI DSS | Policy Management | Risk Management | SOC 2 | Security Questionnaires | Third Party | Third-party due diligence | Vanta | Vendor Risk | Vendor risk management