Ensure effective implementation and continuous improvement of policies and procedures
Maintain and improve Governance, Risk, and Compliance (GRC) programs
Conduct third party risk assessments
Perform risk assessments and control testing for IT systems
Lead ongoing information security training and awareness programs
Facilitate collaboration with IT and other departments for business process integration
Coordinate Business Impact Assessments and risk assessments
Provide up-to-date security reports to the CISO and other stakeholders

Bachelor’s degree or higher in Information Security, Computer Science, or related field
Minimum 5 years of experience in information security management, cybersecurity governance, or risk management
Relevant certifications such as CISSP, CRISC, CISA, or similar are preferred
Experience working with various security frameworks and standards like ISO27001 & CIS18 and ITGC
Experience with regulatory areas like NIS2, GDPR and AI Act is preferred
Hands-on experience with GRC platforms (e.g., Audit Board, ServiceNow GRC)
Strong understanding of IT risk, compliance processes, and audit readiness
Strong proficiency in English, both written and verbal
Experience in developing and conducting security training and awareness programs is an advantage.

GRC Analyst

Key skills