Own and continuously improve our GRC program across ISO 27001, SOC 2, ISO 27701, and ISO 42001
Partner with control owners to make compliance repeatable and low-friction
Drive audit readiness: artifacts, timelines, action tracking, and clear control demonstration
Improve policies, standards, and procedures to reflect actual operations
Build strong working relationships with DevOps/Platform and engineering teams
Evaluate technical implementations and ask good questions
Translate technical reality into clear audit narratives
Contribute to risk identification and assessment
Maintain risk registers and track mitigations
Support leadership reporting by surfacing themes and trends
Evaluate and prepare for future certifications like ISO 22301, HITRUST and FedRAMP

Have a hands-on technical background (engineering, DevOps/SRE, IT management, or similar)
Understand how cloud environments work, especially AWS
Can follow technical conversations well beyond what a traditional auditor can
Have experience supporting audit cycles and know what good evidence looks like
Are organised, proactive, and can drive multiple workstreams independently
Have technical aptitude: comfortable writing a simple script when needed, and experienced using AI and LLM tools in your work.

GRC Analyst

Key skills