
GRC Analyst
Do you have the drive and ambition to help shape a brighter future? Ensure effective implementation and continuous implementation of policies and procedures. Maintain and improve Governance, Risk, and Compliance (GRC) programs to stay aligned with legal, regulatory and contractual requirements. Conduct third party risk assessments. Performs risk assessments and control testing for IT systems. Lead ongoing information security training and awareness programs to strengthen organizational security culture. Facilitate collaboration with IT and other departments to integrate security measures into all business processes. Coordinate Business Impact Assessments and risk assessments to identify vulnerabilities and update mitigation strategies as necessary. Provide up-to-date security reports to the CISO and other stakeholders. What are we looking for? Bachelor’s degree or higher in Information Security, Computer Science, or a related field. Minimum 5 years of experience in information security management, cybersecurity governance, or risk management. Relevant certifications such as CISSP, CRISC, CISA, or similar are preferred. Experience working with various security frameworks and standards like ISO27001 & CIS18 and ITGC . Experience with regulatory areas likes NIS2, GDPR and AI Act is preferred Hands-on experience with GRC platforms (e.g., Audit Board, ServiceNow GRC). Strong understanding of IT risk, compliance processes, and audit readiness. Project leadership and strong communication skills. Strong proficiency in English, both written and verbal. Experience in developing and conducting security training and awareness programs is an advantage. Can you balance ambition with care for your colleagues? You’ll join our Digital Group Information Security global team. You’ll enjoy professional development and progression in a growing global company where we inspire and collaborate to build a brighter future together. You’ve been hired for your unique perspective – so speak up and share opportunities for improvement. Build a career that supports responsible practices and contributes to better business performance at the same time. Does it sound like a match to you? Click the ‘Apply for position’ button in the top-right corner and submit your application letter with a CV in English via our recruitment system. Application due 2026-09-30
Job Details
Responsibilities
- Define and implement governance, risk and compliance (GRC) programs to stay aligned with legal, regulatory and contractual requirements.
- Conduct third-party risk assessments and IT system risk assessments.
- Perform control testing and ensure audit readiness.
- Lead information security training and awareness programs.
- Collaborate with IT and other departments to integrate security measures into business processes.
- Coordinate Business Impact Assessments and risk assessments to identify vulnerabilities and update mitigation strategies.
Requirements
- Bachelor’s degree or higher in Information Security, Computer Science, or a related field
Skills & Technologies
Education Level
Bachelor
Related Opportunities
Discover more opportunities that match your interests and skills