Senior Security Analyst - GRC
Core
Lead and support global GRC activities including compliance initiatives, security audits, risk management, and customer security questionnaires for a cloud-based procurement platform.
Role type
Senior Security Analyst (GRC)
Builds
Security compliance posture, audit readiness, and risk management frameworks for EMEA customers
Domain
Cloud Security / GRC / Compliance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Security and compliance frameworks (NIST, ISO 27001, SOC, PCI-DSS, GDPR), audit management, risk assessment, cloud security architecture, GRC tooling
Preferred skills
CISSP, CISA, CISM, Azure Cloud Security, Big 4 experience, SaaS security function experience
Technologies
Azure, AWS, GCP, NIST 800-53, ISO 27001, SOC 1/2, IRAP, PCI-DSS, SecNumCloud, Cyber Essentials Plus, BSI C5, NIST 800-39
Responsibilities
Lead compliance initiatives across global frameworks; Evaluate technical controls across the technology stack; Drive customer security audits and contract reviews; Present security architecture to prospects and customers; Lead internal and third-party risk management processes; Support continuous compliance monitoring; Own execution of security controls (BIA, DR testing, incident response exercises)
Seniority
Senior, hands-on IC