GRC Analyst - Remote

Overview

An experienced GRC Analyst is needed to join the IT, Security, and Compliance team, focusing on governance, risk management, and compliance activities.

In Short

• Develop and maintain the Information Security Management System (ISMS).
• Ensure compliance with security standards like ISO 27001 and ISO 27701.
• Support risk management and lead audit preparations.
• Update and enforce information security policies and procedures.
• Conduct internal audits and support external assessments.
• Manage vendor security and data privacy questionnaires.
• Interact with IT staff regarding information security.
• Liaise with service delivery areas for security incident management.

Requirements

• Experience in GRC activities.
• Knowledge of ISO 27001 and ISO 27701 standards.
• Strong understanding of risk management processes.
• Ability to conduct audits and assessments.
• Excellent communication skills.
• Experience with security policies and procedures.
• Familiarity with GDPR compliance.

Benefits

• Opportunity to work in a multidisciplinary team.
• Focus on professional growth and development.
• Flexible working arrangements.