Senior Cybersecurity GRC

Responsibilities

• Run continuous risk assessments and threat modeling with engineering teams
• Maintain actionable security policies and standards
• Create control objectives for CI/CD, cloud, SaaS, and identity workflows
• Support audits and automate evidence collection
• Drive third-party risk assessments and scalable vendor processes
• Create security playbooks and self-service materials for engineering teams

Requirements

• Experience in GRC, risk, or compliance within a tech environment (Cloud, SaaS, or Engineering)
• Strong understanding of identity, access, logging, and incident response
• Knowledge of cloud shared responsibility and secure SDLC
• Ability to write clear policies and translate requirements into engineering controls
• Strong stakeholder management and influence skills

Preferred Qualifications

• Experience with NIST CSF, ISO 27001, or SOC 2 frameworks
• Experience with vendor risk platforms or automation tools
• Familiarity with compliance-as-code and continuous controls monitoring
• Experience partnering with product teams on secure-by-design practices

Benefits

• Tailor-made training and coaching program
• Remote working policy
• Wellness program and digital mental health platform access
• Individual or family health insurance
• Sustainable mobility package (public transport reimbursement)
• Gym access and company restaurant