Senior GRC Analyst
Core
Own the Information Security Management System (ISMS) and coordinate its ISO 27001 certification and ongoing assurance cycle for a travel platform.
Role type
Senior GRC Analyst (ISMS Owner)
Builds
ISO 27001 certified security management system and compliance framework
Domain
Information Security / GRC / Travel
Required skills
ISMS management, ISO 27001 certification, risk management, PCI DSS, GDPR, third-party security assessments, incident response coordination, security awareness training
Preferred skills
CISM, CISSP, ISO 27001 Lead Implementer/Auditor, cloud security, SOC 2, AI governance, ISO 42001, vulnerability management, SIEM, SaaS access management
Technologies
ISO 27001, PCI DSS, GDPR, AWS, EDR, SIEM, Microsoft Entra ID
Responsibilities
Maintain ISMS scope, policies, and evidence; coordinate internal and external ISO 27001 audits; own risk register and treatment tracking; manage vendor security assessments; oversee incident response and customer due diligence requests; run security awareness training.
Seniority
Senior, hands-on IC
