> Markdown version of [/jobs/ext/2726823-grc-analyst](https://www.wearedevelopers.com/jobs/ext/2726823-grc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # GRC Analyst - **Company:** Rhymetec - **Location:** London, UK (Remote available) - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Software as a Service, Cloud Computing Security, Cyber Security, DevOps, Infrastructure as a Service (IaaS), Intrusion Detection Systems, Logical Security, Systems Integration, Datadog, Information Security Management System, Google Cloud, Cloud Platform System, Performance Monitor, Casper Suite, Unified Endpoint Management - **Published:** September 5, 2026 - **Apply:** https://startup.jobs/grc-analyst-rhymetec-8341254 ## About the Role * Knowledge of compliance and regulatory frameworks (PCI, ISO/IEC, SOC 2, DORA, GDPR) * Strong logical security skills, with experience in cloud security * Understanding of cloud environments (AWS, GCP, Azure) and integrating security controls through DevOps and Infrastructure as a Service (IaaS) techniques * Experience in customer service and ability to develop professional relationships with customers Must Haves: * Bachelor's degree or equivalent experience related to the technology or cyber security field * Bilingual in German and/ or French * 4+ years of work experience in technology or cybersecurity. * Ability to flex and adapt to innovative and changing work demands. * Travel up to 2 weeks out of the calendar year. ## Description We are seeking a GRC Analyst to join our growing team in the UK! The CSA will be responsible for supporting the development and implementation of solutions that help Rhymetec's clients achieve, manage and measure security metrics and compliance requirements. The role will work closely with their Security Program Manager to help design and deliver security and compliance objectives and have the ability to help drive foundational changes in internal cloud platforms to enhance their security posture. The ideal candidate will have a team first mentality and fit within the core values and culture at Rhymetec. This person will be responsive to both customers and team members with communications, be detail oriented, and hold a high level of autonomy to complete work on time and with quality., * Prepare agendas and supporting materials for client business. * Conduct meetings with clients regularly. * Configure performance monitoring alarms in AWS, Azure, GCP, Datadog and other cloud infrastructures. * Configure Security alarms and Intrusion Detection Systems in AWS, GCP, Azure. * Set up supporting security applications. * Set up mobile device management applications such as Jamf, Jumpcloud, Microsoft Endpoint manager, Hexnode, etc. * Configure and maintain compliance monitoring platforms. * Conduct internal audits, risk assessments, and generate reports. * Conduct Incident Response Tabletop exercises with clients. * Conduct Business Continuity and Disaster recovery tabletop exercises with clients. * Support clients in mapping frameworks/controls such as SOC 2 Type 2, ISO 27001, GDPR, and DORA into actionable items for clients. * Conduct employee access reviews, SaaS vendor security assessments, and Gap assessments. * Triage bug/vulnerability reports from security researchers. * Complete security questionnaires on behalf of clients. * Draft supporting documents for clients' information security management systems and information security policies. * Gather & maintain evidence of compliance for various frameworks. * Lead engagements with auditors on behalf of clients. * Communicate tasks to clients' employees and educate clients on security best practices. ## Related Videos - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Debugging in the Dark](https://www.wearedevelopers.com/videos/1658-debugging-in-the-dark) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Software Engineering Social Connection: Yubo’s lean approach to scaling an 80M-user infrastructure](https://www.wearedevelopers.com/videos/1583-software-engineering-social-connection-yubo-s-lean-approach-to-scaling-an-80m-user-infrastructure) ## Related Articles - [The Biggest German Tech Companies](https://www.wearedevelopers.com/magazine/424-the-biggest-german-tech-companies) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Finding Jobs in Germany](https://www.wearedevelopers.com/magazine/375-finding-jobs-in-germany) - [Data Analyst Salary Germany](https://www.wearedevelopers.com/magazine/277-data-analyst-salary-germany) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Jobs in Germany for Americans](https://www.wearedevelopers.com/magazine/423-jobs-in-germany-for-americans)