Lead IT GRC Analyst – Policy Management

This is a fully remote position, open to applicants in Greece, +1 more country.

📋 Description

• Oversee the operational execution, integration, and ongoing enhancement of the Cyber Governance & Controls function.

• Create and refine governance operating procedures, playbooks, lifecycle schedules, decision records, and regular operating rhythms.

• Organize policy forums, standards reviews, governance working sessions, steering decisions, escalations, action-item closures, and quarterly operating reviews.

• Facilitate the Global Cybersecurity Governance Steering Committee and lead the Global Cybersecurity Governance Working Group.

• Define and uphold roles, decision rights, RACIs, reviewers, approvers, accountable service owners, evidence expectations, and exception processes.

• Manage the complete lifecycle of cyber policies, standards, configuration baselines, procedures, and guidance.

• Maintain the Cyber Policy Library, including document hierarchy, review calendar, approval evidence, version history, control mappings, glossary, and publication controls.

• Coordinate Cybersecurity Risk Acceptance Memoranda, corrective action plans, approval records, reporting, and retirement criteria.

• Sustain the Cyber Governance & Controls service catalog and standardize intake, triage, prioritization, status, decision-making, escalation, evidence, and closure practices.

• Evaluate demand, throughput, aging, adoption, quality, stakeholder experience, control effectiveness, and operational health.

• Develop governance metrics, KPIs, scorecards, dashboards, executive updates, quarterly operating reviews, and portfolio health reporting.

• Assist in governance maturation, transformation, automation, maturity assessments, gap analysis, target operating models, governance gates, and roadmap milestones.

• Promote GRC modernization through ServiceNow IRM, LogicGate RiskCloud, Jira, risk hubs, policy repositories, dashboards, and evidence sources.

• Collaborate with Cybersecurity, Operations & Technology, Legal, Privacy, Audit, Procurement, and business stakeholders for alignment, decision-making, communication, and adoption.

⛳️ Requirements

• A minimum of 5 years of experience in governance, risk management, compliance, cybersecurity operations, business operations, service operations, or a related field.

• Bachelor’s degree or equivalent relevant professional experience.

• Proven experience in establishing and managing operating processes, governance frameworks, service management practices, or control environments.

• Background in developing executive reporting, scorecards, dashboards, and performance metrics.

• Capability to coordinate work across multiple stakeholders and functions within a complex organization.

• Outstanding written and verbal communication skills.

• Strong abilities in written and verbal communication, facilitation, analysis, and organization.

• Experience supporting Governance, Risk and Compliance, cybersecurity, audit, third-party risk, or enterprise risk functions.

• Familiarity with governance frameworks, controls management, policy management, and enterprise operating models.

• Experience with ServiceNow IRM, LogicGate, Archer, Jira, or similar governance and workflow platforms.

• Knowledge of NIST, ISO 27001, PCI DSS, or CIS standards.

• Understanding of AI governance principles, emerging AI risks, responsible AI practices, and the integration of AI requirements into enterprise governance and control frameworks.

• Self-motivated, collaborative, and adept at managing competing priorities in a highly matrixed environment.

🏝️ Benefits

• Comprehensive medical, dental, and vision insurance.

• 401(k) retirement plan.

• Paid leave benefits.

• Tuition reimbursement opportunities.

• Discounts and perks available.

• Fully remote work arrangement.