GRC, Cybersecurity, Compliance Professional

This is a fully remote position, open to applicants in Greece.

📋 Description

• Oversee and orchestrate compliance efforts for SOC 2 and ISO 27001.

• Lead activities to prepare for audits, which include gathering evidence, managing documentation, and tracking remediation efforts.

• Collaborate with cross-functional stakeholders and control owners to guarantee the timely fulfillment of security and compliance obligations.

• Schedule meetings, keep track of action items, and ensure follow-up on deliverables and deadlines.

• Assist with both internal and external audit processes as well as certification initiatives.

• Monitor risks, findings, remediation strategies, KPIs, and provide program status updates.

• Work closely with cybersecurity leadership and technical teams to convert compliance requirements into actionable measures.

• Foster security awareness and uphold governance best practices across the organization.

• Keep compliance documentation, policies, procedures, and evidence repositories up to date.

⛳️ Requirements

• A minimum of 10 years of experience in Cybersecurity, IT Audit, GRC, Compliance, Risk Management, or related disciplines.

• Proven experience in supporting or managing SOC 2 and/or ISO 27001 programs.

• Strong skills in Program Management and Project Management.

• Experience in coordinating audits, compliance initiatives, and managing cross-functional stakeholders.

• Ability to effectively communicate with both technical and non-technical teams.

• Experience in managing action plans, timelines, risks, dependencies, and compliance deliverables.

• Excellent written and verbal communication skills in English.

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Business, Risk Management, or a related field.

• Experience with cybersecurity governance and security maturity programs.

• Familiarity with supporting SOC 2 Type II audits and ISO 27001 certification efforts.

• Knowledge of frameworks such as NIST CSF, CIS Controls, HIPAA, PCI-DSS, GDPR, or similar.

• Proficient in tools like Jira, Confluence, Drata, Vanta, AuditBoard, ServiceNow GRC, or comparable platforms.

• Relevant certifications such as CISA, CISM, CISSP, CRISC, ISO 27001 Lead Auditor, or equivalent are preferred.

🏝️ Benefits

• Comprehensive health and wellness programs.

• Opportunities for professional development and certifications.

• Flexible work arrangements and a supportive team environment.