Senior GRC Analyst (m,f,x)
Core
Lead end-to-end compliance readiness for NIS2 and support alignment across frameworks like PCI DSS, CSRD, ISO/SOC, and EU AI Act; plan and execute internal control assessments and coordinate external compliance audits.
Role type
Senior GRC Analyst
Builds
Security risk management program, remediation activities, information security and data privacy processes, policies, and guidelines
Domain
Technology / Cybersecurity / Regulatory Compliance
Required skills
IT General Controls (ITGC), SOC 2, ISO 27001, PCI DSS, EU NIS2, GDPR, CCPA/CPRA, third-party vendor risk management, security awareness program development, regulatory interpretation, cross-functional coordination, remediation management, compliance reporting
Preferred skills
CISA, CISM, CISSP certifications, SaaS environment experience, Cloud architecture, AWS-based systems
Technologies
NIS2, PCI DSS, CSRD, ISO/SOC, EU AI Act, GDPR, CCPA/CPRA, AWS
Responsibilities
Lead end-to-end compliance readiness for NIS2 and support alignment across other key frameworks; Plan and execute internal control assessments and coordinate external compliance audits; Translate regulatory requirements into practical controls; Own remediation management by tracking findings and reporting status; Improve GRC maturity through continuous monitoring and mentoring; Evaluate and validate the design and operational effectiveness of security policies and internal controls; Develop comprehensive reports on the compliance landscape for technical and executive audiences
Seniority
Senior, hands-on IC
