GRC Analyst

• Support implementation, maintenance, and continuous improvement of the Group ISMS aligned with ISO/IEC 27001, NIS2, and DORA
• Conduct cybersecurity risk assessments and gap analyses on internal systems, applications, and architecture projects
• Drive third-party risk management by evaluating vendors, SaaS applications, and external partners
• Review technical data flows, IAM/MFA requirements, and security controls during project onboarding before go-live
• Draft, review, and maintain Group security policies, procedures, and baseline documentation
• Standardize compliance evidence collection, monitor remediation action plans, and track KPIs across 25 country entities
• Assist with risk and impact assessments for the EU AI Act and GDPR compliance
• Prepare executive-level risk reports and dashboards
• Report directly to the Group GRC Manager

• 1–3+ years of professional experience in Information Security, Cybersecurity Governance, Risk, and Compliance (GRC), or Security Auditing
• Solid understanding of ISO/IEC 27001, NIS2, DORA, NIST CSF, and GDPR
• Practical experience conducting risk assessments, gap analyses, and evaluating third-party vendor risks (TPRM)
• Working knowledge of IAM, MFA, encryption, and SaaS security baselines
• Exposure to ServiceNow GRC, OneTrust, or BitSight is a plus
• Strong communication skills to translate regulatory and security requirements into actionable advice
• Relevant certifications or educational background in Computer Science, Cybersecurity, IT Law, or GRC are highly valued
• Full fluency in English is mandatory
• French language skills are a strong plus
• Ability to work in a global, multicultural environment

• Remote work option
• Equal-opportunity employment
• Disability-inclusive hiring