Junior GRC Analyst

 Let's start with the role

We seek a Junior GRC Analyst who will be exposed to various areas with guidance from senior team members and management support. The role involves ensuring that security requirements set by laws, regulators, and licensing bodies are met and monitored, confirming compliance with recognized security standards such as PCI and ISO 27001, and meeting security requirements and control objectives for other interested parties, such as customers. The team members will work alongside senior member to ensure the effectiveness of technical security controls as part of their daily tasks. Additionally, they will participate in addressing company-wide security and data privacy risks, aiming to minimize the probability and impact of security incidents.

As a Junior GRC Analyst you will:

• Analyze security incidents and propose countermeasures;
• Analyze new projects and services to supply the necessary security requirements and ensure security and privacy by design and by default, as GDPR requires;
• Work with Agile project teams and standalone security projects;
• Provide expert advice and feedback to technology teams regarding secure development and secure system life-cycle requirements;
• Ensure that security requirements are met in the company’s disaster recovery and business continuity plans;
• Ensure security programs and data handling follow applicable laws/regulations;
• Ensure that security risks are timely identified and mitigated to minimize the business disruption that could affect company revenue and good regulatory standing;
• Ensure that the design, specification, implementation and operation of information systems and networks conform to company’s information security policy;
• Design, maintain and implement the ISMS (ISO 27001 Compliant) for the whole group and ensure its effectiveness;
• Monitor and enhance the effectiveness of all policies, procedures and controls in accordance to the KPIs set in the ISMS. 

What you’ll bring

• B.Sc./M.Sc. in Information Security or in a related field (Information Technology, Digital Systems, Applied Mathematics, etc.);
• Strong interpersonal and organizational skills;
• Strong knowledge of technology and IT industry, standards, current trends and best practices;
• One or more out of the globally recognized information security professional certifications (CISA, CISM, CISSP, CISM, ISO27001 Lead Auditor, CIPM) is a plus;
• Experience in Information Security or a related field (IT Audit, Data Privacy) is preferred.