Senior GRC Analyst

Job Description

Role Overview

We’re looking for a new teammate who will support the implementation and ongoing maintenance of information security compliance and certification programs, working with cross-functional internal teams and external auditing agencies. The person will also support data protection, data privacy, and third-party vendor risk management functions.

What You Will Do

Lead end-to-end compliance readiness for NIS2 and support alignment across other key frameworks (e.g., PCI DSS, CSRD, ISO/SOC and EU AI Act). Plan and execute internal control assessments and coordinate external compliance audits on a defined cadence.

Why It Might Be a Fit

3+ years' experience in performing compliance activities in a corporate environment related to IT General Controls (ITGC), SOC 2, ISO 27001, PCI DSS, EU NIS2, and various data privacy directives (GDPR, CCPA/CPRA, etc.). Ability to interpret compliance regulations and map them to the actual implementation of systems, whilst referencing various security frameworks.

Requirements

3+ years' experience in performing compliance activities in a corporate environment related to IT General Controls (ITGC), SOC 2, ISO 27001, PCI DSS, EU NIS2, and various data privacy directives (GDPR, CCPA/CPRA, etc.)
Ability to interpret compliance regulations and map them to the actual implementation of systems, whilst referencing various security frameworks
Experience supporting data privacy regulations (GDPR, CCPA) and third-party risk management programs
Experience with developing and executing security awareness programs and trainings
Industry compliance certifications (CISA, CISM, CISSP) are a plus
Prior experience working in a SaaS environment, mainly Cloud and AWS-based

Benefits