GRC Analyst (EMEA)
Core
Maintain and improve Chainguard's compliance and risk programs, supporting SOC 2 Type II and ISO 27001 audit readiness while managing evidence, controls, and remediation.
Role type
earlier-career hands-on GRC analyst
Builds
compliance programs, audit readiness, risk management processes
Domain
Cybersecurity / Governance, Risk & Compliance
Deliverable
dashboards & analysis
Required skills
audit coordination, evidence management, risk assessment, policy maintenance, gap analysis, remediation tracking, GRC platform usage, stakeholder communication, process documentation, cross-functional collaboration
Preferred skills
SOC 2/ISO 27001 framework experience, GRC platform familiarity (Vanta/Drata), control testing, risk registers, cloud environment exposure, automation/scripting, third-party risk management
Technologies
Vanta, Drata, ticketing tools, spreadsheets
Responsibilities
Support audit readiness activities for SOC 2 Type II and ISO 27001; Coordinate evidence collection with Security, Engineering, Legal, HR, and Product teams; Maintain security policies, standards, and control descriptions; Assist with control testing, risk assessments, and gap analysis; Keep compliance data accurate in GRC platforms; Translate auditor requests into actionable next steps; Track action items and communicate status/blockers; Identify workflow improvement opportunities through automation; Develop repeatable processes and checklists; Support customer security reviews and third-party risk activities.
Seniority
Junior, hands-on IC