Senior GRC Analyst

About Our Client:

The organization operates within the on-demand commerce industry, supporting a global market by integrating technology, talent, and infrastructure. Formed in 2024 through the merger of multiple entities, it enables the creation and delivery of customized products for a diverse client base ranging from individual creators to large entertainment companies. The organization maintains a certified security posture and is engaged in continual governance and compliance improvements to support its expanding framework requirements.

About the Opportunity:

The SENIOR GRC ANALYST role is focused on executing the organization's cybersecurity governance, risk, and compliance strategies. Reporting to the manager of the Cybersecurity Governance & Assurance function, this individual contributor is responsible for managing audit processes, vendor security assessments, risk management activities, and the automation of governance operations. The position plays a critical role in maintaining compliance certifications and advancing the efficiency and effectiveness of security governance practices.

Responsibilities:

• Manage and execute internal and external audits across ISO 27001, SOC 2, and related frameworks, including evidence collection and communication with auditors.
• Design and implement automation solutions for compliance activities, leveraging industry-standard GRC platforms and AI-based workflows.
• Conduct security assessments for third-party vendors during onboarding and ongoing reviews.
• Maintain the risk register, perform risk assessments, and track remediation efforts.
• Develop and update information security policies and contribute to security awareness and training materials.

Requirements:

• Over 5 years of experience in cybersecurity GRC, IT audit, or security compliance with hands-on involvement in full ISO 27001 and/or SOC 2 audit cycles.
• Strong communication and negotiation skills with the ability to manage stakeholder expectations under pressure.
• Demonstrated ability to build practical automation using scripts, integrations, or AI-assisted workflows.
• Self-directed with strong ownership and problem-solving capabilities.
• Proficient in written and spoken English.
• Relevant certifications such as ISO 27001 Lead Implementer/Auditor, CISA, CISSP, or CISM are advantageous but practical audit experience is prioritized.

Pay Range and Compensation Package:

• Monthly salary starting at EUR 5,000 gross, dependent on experience, education, and skills.

Benefits & Perks:

• Private health insurance.
• Opportunity to work remotely or from a modern office.
• Flexible working hours.
• Additional paid days off for well-being and celebrations.
• Learning opportunities and access to mentorship and internal events.
• Free lunch when working from the office.
• Employee discounts on products.

Equal Opportunity Statement: Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin.

Note:

RemoteHunter is a recruitment partner of this role. Please note that all employment decisions, including candidate assessment, interviews, hiring, compensation, and employment terms, are made exclusively by the hiring employer.