GRC Analyst (f,x,m)
Core
Operate the end-to-end cycles of third-party risk, business continuity, control-testing, and audit-evidence to ensure audit readiness.
Role type
GRC Analyst (IT/process audit, BCM, or GRC operations)
Builds
Audit-ready registers and evidence packs for third-party risk, business continuity, and compliance frameworks
Domain
Fintech / Healthcare / European regulatory compliance
Deliverable
dashboards & analysis
Required skills
Third-party risk management, business continuity management (BCM), control testing, audit evidence collection, policy review administration, workpaper discipline, vendor assessment support
Preferred skills
Experience in scale-up or fintech environments, familiarity with ISO 27001/SOC 2/C5 certifications
Technologies
Compliance platforms, risk registers, evidence management tools
Responsibilities
Monitor failing controls and chase remediation, run third-party lifecycle assessments and reviews, coordinate business continuity tests and exercises, maintain risk registers and findings logs, support external audits (C5, ISO, bank partners), administer policy review cycles
Seniority
Mid-level (2–4 years experience)