> Markdown version of [/jobs/ext/2950430-information-security-analyst-grc](https://www.wearedevelopers.com/jobs/ext/2950430-information-security-analyst-grc). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Analyst, GRC - **Company:** Jobgether - **Location:** Netherlands (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Software as a Service, Cloud Computing Security, Cyber Security - **Published:** September 17, 2026 - **Apply:** https://www.adzuna.nl/details/5886402391 ## About the Role * 7+ years of experience in information security, risk, compliance, security assurance, or a related discipline. * Hands-on experience in a technical environment such as Engineering, IT, operational security, or a comparable function. * Proven experience completing or reviewing technical security questionnaires, customer security assessments, and due-diligence requests. * Strong knowledge of security, compliance, and data protection frameworks such as SOC 2, ISO 27001, NIST, GDPR, and HIPAA. * Practical experience conducting or supporting third-party and vendor security risk assessments. * Strong written and verbal communication skills, with the ability to explain complex security concepts clearly to both technical and non-technical audiences. * Highly organized and detail-oriented, with a pragmatic approach to identifying and managing risk. * Comfortable working independently and taking ownership in a fast-moving, remote-first startup environment. * Familiarity with modern AI tools and the ability to use them productively while appropriately managing associated risks. * Strong analytical and problem-solving skills, with the ability to balance security requirements against business priorities. * Experience in a SaaS or cybersecurity-focused organization is advantageous. * Experience handling GDPR Subject Access Requests is a plus. * Security or risk certifications such as CRISC or CISSP are valued. * Knowledge of cloud security best practices is beneficial. ## Description Join a remote-first security team operating at the intersection of cybersecurity, AI, compliance, and risk management. You'll help strengthen the organization's security and trust function while supporting customers and prospects through complex security reviews. The role combines technical security knowledge with governance, risk, compliance, and third-party risk management. You'll work closely with IT, Security, Engineering, Legal, Sales, and Customer teams to communicate security controls and manage risk effectively. Your work will contribute to maintaining compliance with leading frameworks while improving how risks are identified, assessed, documented, and remediated. You'll also have opportunities to streamline and automate GRC processes as the organization scales. This individual contributor role offers significant ownership and the potential to grow into a broader risk and compliance leadership scope. Accountabilities * Support customers and prospects by completing technical security questionnaires, risk assessments, due-diligence requests, and security reviews. * Partner with Sales and Customer teams to clearly explain security controls, architecture, compliance posture, and risk management practices. * Assess and manage security risks associated with third-party vendors, SaaS providers, and service partners. * Investigate and resolve compliance alerts and support ongoing compliance activities using GRC tooling such as Vanta. * Maintain and continuously improve risk assessment frameworks, methodologies, processes, and supporting documentation. * Track identified risks through remediation in collaboration with relevant internal stakeholders. * Contribute to compliance initiatives aligned with frameworks and standards including SOC 2, FedRAMP 20x, ISO 27001, and ISO 42001. * Maintain accurate and well-structured risk registers, security policies, evidence, and other compliance documentation. * Coordinate risk management sessions and support ongoing risk governance processes. * Identify opportunities to simplify, streamline, and automate risk and compliance activities as the organization grows. * Support internal assurance activities, audits, customer reviews, and other security-related assessments. * Collaborate across IT, Security, Engineering, Legal, Sales, and Customer teams to ensure security and compliance requirements are understood and addressed. * Help strengthen the overall security and trust function through practical, scalable, and risk-based processes. ## Related Videos - [Forecasting Cyber Attacks with Glassdoor Reviews - Lianne Potter](https://www.wearedevelopers.com/videos/2143-forecasting-cyber-attacks-with-glassdoor-reviews-lianne-potter) - [Beyond the Hype: Building Trustworthy and Reliable LLM Applications with Guardrails](https://www.wearedevelopers.com/videos/1594-beyond-the-hype-building-trustworthy-and-reliable-llm-applications-with-guardrails) - [Edit Your Future: Queerverse Radical AI](https://www.wearedevelopers.com/videos/909-edit-your-future-queerverse-radical-ai) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [AI is dead, long live AK](https://www.wearedevelopers.com/videos/1093-ai-is-dead-long-live-ak) ## Related Articles - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Best Companies in the Netherlands: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/193-best-companies-in-the-netherlands-top-25-companies-in-2023) - [How to Find Tech Jobs in Amsterdam](https://www.wearedevelopers.com/magazine/279-how-to-find-tech-jobs-in-amsterdam) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [How to land a developer job in Amsterdam](https://www.wearedevelopers.com/magazine/36-how-to-land-a-developer-job-in-amsterdam)