GRC Analyst

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Develop agendas and accompanying materials for client business interactions.

• Regularly meet with clients to discuss ongoing projects.

• Set up performance monitoring alerts in AWS, Azure, GCP, Datadog, and other cloud platforms.

• Establish security alerts and Intrusion Detection Systems in AWS, GCP, and Azure.

• Implement supporting security applications.

• Configure mobile device management solutions like Jamf, JumpCloud, Microsoft Endpoint Manager, Hexnode, etc.

• Configure and oversee compliance monitoring systems.

• Perform internal audits, risk assessments, and produce reports.

• Facilitate Incident Response Tabletop exercises with clients.

• Conduct Business Continuity and Disaster Recovery tabletop exercises with clients.

• Assist clients in translating frameworks/controls such as SOC 2 Type 2, ISO 27001, GDPR, and DORA into actionable tasks.

• Execute employee access reviews, SaaS vendor security evaluations, and gap assessments.

• Manage bug/vulnerability reports submitted by security researchers.

• Fill out security questionnaires on behalf of clients.

• Create supporting documents for clients' information security management systems and policies.

• Collect and uphold compliance evidence for various frameworks.

• Lead auditor engagements on behalf of clients.

• Communicate tasks to clients’ personnel and educate them on security best practices.

⛳️ Requirements

• Familiarity with compliance and regulatory frameworks (PCI, ISO/IEC, SOC 2, DORA, GDPR).

• Strong logical security abilities, with experience in cloud security.

• Knowledge of cloud environments (AWS, GCP, Azure) and the integration of security controls via DevOps and Infrastructure as a Service (IaaS) methodologies.

• Experience in customer service with a proven ability to build professional relationships with clients.

• Bachelor's degree or equivalent experience in technology or the cybersecurity sector.

• Over 3 years of professional experience in technology or cybersecurity.

• Capacity to adapt to innovative and evolving work demands.

• Willingness to travel up to 2 weeks per calendar year.

🏝️ Benefits

• Comprehensive, company-funded private medical insurance for employees.

• Dental and optical benefits.

• Generous annual leave package, including sick pay and 28 days of annual leave in addition to bank holidays.

• Workplace pension plan.

• Wellbeing Support: An annual subscription to TalkSpace, our online counseling and therapy service.