GRC Analyst – EMEA

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Assist in audit readiness efforts for SOC 2 Type II, ISO 27001, and various security assurance initiatives.

• Facilitate the collection of evidence across departments including Security, Engineering, Legal, HR, Product, and others.

• Oversee the maintenance of security policies, standards, procedures, control descriptions, and relevant documentation.

• Support control testing, risk evaluations, gap analyses, and remediation tracking.

• Ensure the accuracy of compliance and risk information within GRC platforms like Vanta.

• Interpret requests from auditors, customers, and internal security into actionable next steps for stakeholders.

• Monitor action items, follow up on dependencies, and relay status updates, risks, and obstacles.

• Enhance GRC workflows through improved documentation, automation, and modern tools.

• Create and maintain repeatable processes, checklists, runbooks, and practices for evidence collection.

• Assist in customer security reviews, questionnaires, and third-party risk management activities.

• Acquire knowledge of Chainguard systems and security practices to identify discrepancies and escalate potential risks.

• Collaborate with senior Security and GRC team members on initiatives aimed at strengthening Chainguard’s security posture.

⛳️ Requirements

• A minimum of 2 years of experience in information security, GRC, compliance, audit, risk, IT, or a relevant field; equivalent hands-on experience is acceptable.

• Background in supporting audits, control activities, risk assessments, security questionnaires, or compliance programs.

• Excellent organizational and project coordination abilities.

• Proficient in clear written and verbal communication for both technical and non-technical audiences.

• A structured, detail-oriented method to documentation, evidence management, and follow-through.

• A genuine curiosity about technology and security controls, with the confidence to ask questions and explore unfamiliar subjects.

• Comfortable working with spreadsheets, documentation systems, ticketing tools, and GRC platforms.

• Interest in enhancing repetitive processes through automation, improved tools, or clearer workflows.

• A collaborative, team-oriented mindset and capability to work across regions and functions.

• Ability to thrive in a fast-paced environment.

• Experience with SOC 2, ISO 27001, NIST, or another security or assurance framework.

• Familiarity with GRC platforms such as Vanta, Drata, or similar tools.

• Experience in control testing, risk registers, remediation plans, or policy management.

• Exposure to cloud environments, SaaS applications, software development methodologies, or security operations.

• Knowledge of third-party risk management or customer security reviews.

• Experience in workflow improvement through automation, integrations, or lightweight scripting.

🏝️ Benefits

• Flexible and remote-first culture.

• Opportunities for team meetups.

• Bi-annual destination summits.

• Monthly stipend for coworking spaces, phone, and internet expenses.

• Stock options upon hiring and promotions.

• Participation in secondary offerings.

• 10 years to exercise stock options.

• 100% coverage of health, vision, and dental insurance premiums for employees and their dependents.

• Unlimited flexible time off.

• 18 weeks of paid parental leave for birthing parents.

• 12 weeks of paid parental leave for non-birthing parents.

• Opportunities for professional growth through real security and assurance programs.

• Support from experienced teammates.

• Opportunities to enhance processes and tools.

• Collaboration with colleagues across EMEA and the wider organization.