Senior GRC Analyst
Core
Own the Information Security Management System (ISMS) and coordinate its ISO 27001 certification and ongoing assurance cycle.
Role type
Senior GRC Analyst (ISMS Owner)
Builds
ISO 27001 certified security management system
Domain
Information Security / GRC / Compliance
Required skills
ISMS management, ISO 27001 certification, risk management, PCI DSS, GDPR, third-party security assessments, incident response, security awareness training
Preferred skills
CISM, CISSP, ISO 27001 Lead Implementer/Auditor, AWS, cloud security, SOC 2, AI governance, ISO 42001, EDR, vulnerability management, SIEM, Microsoft Entra ID
Technologies
ISO 27001, PCI DSS, GDPR, AWS, EDR, SIEM, Microsoft Entra ID
Responsibilities
Maintain ISMS scope, policies, and evidence; coordinate internal and external ISO 27001 audits; own risk register and treatment tracking; manage vendor security assessments; lead incident response and security awareness programs.
Seniority
Senior, hands-on IC
