GRC Analyst

This is a fully remote position, open to applicants in Greece, +1 more country.

📋 Description

• Facilitate the implementation, upkeep, and ongoing enhancement of the Group ISMS in accordance with ISO/IEC 27001, NIS2, and DORA standards.

• Perform cybersecurity risk evaluations and identify gaps within internal systems, applications, and architectural projects.

• Lead third-party risk management initiatives by assessing vendors, SaaS applications, and external partnerships.

• Analyze technical data flows, IAM/MFA prerequisites, and security measures during project initiation prior to launch.

• Create, review, and sustain Group security policies, procedures, and foundational documentation.

• Standardize the collection of compliance evidence, oversee remediation action plans, and monitor KPIs across 25 country entities.

• Assist in conducting risk and impact evaluations for adherence to the EU AI Act and GDPR regulations.

• Compile executive-level risk reports and dashboards.

• Report directly to the Group GRC Manager.

⛳️ Requirements

• 1–3+ years of professional experience in Information Security, Cybersecurity Governance, Risk, and Compliance (GRC), or Security Auditing.

• Strong understanding of ISO/IEC 27001, NIS2, DORA, NIST CSF, and GDPR regulations.

• Hands-on experience in conducting risk assessments, gap analyses, and evaluating third-party vendor risks (TPRM).

• Familiarity with IAM, MFA, encryption, and SaaS security benchmarks.

• Experience with ServiceNow GRC, OneTrust, or BitSight is advantageous.

• Excellent communication skills to convert regulatory and security requirements into practical guidance.

• Relevant certifications or academic background in Computer Science, Cybersecurity, IT Law, or GRC are highly regarded.

• Full proficiency in English is essential.

• Proficiency in French is a significant advantage.

• Capability to operate in a global, multicultural setting.

🏝️ Benefits

• Option for remote work.

• Commitment to equal-opportunity employment.

• Inclusive hiring practices for individuals with disabilities.