Information Security Grc Analyst

OverviewIn this role you help safeguard IT and business processes by identifying, assessing, and mitigating cybersecurity risks.You will collaborate with the Cyber & IT Risk Team to implement risk controls, policies, and standards across the organization.You’ll document gaps, guide remediation, and support regulatory compliance (ISO**, NIST, GDPR).You contribute to building a robust Audit function within Information Security and partner with cross-functional teams to drive secure, scalable practices.This is a chance to shape security governance in a growth-focused, technology-enabled company.ResponsabilidadesBuild and maintain the Information Security Audit functionManage and mature the IT risk control framework for effective operation and monitoringDocument control gaps, provide remediation guidance, and drive mitigation projectsDevelop security policies, standards, and procedures for standardization of controlsPerform risk assessments across IT and business processes and propose mitigationsEnsure risk and remediation plans are addressed by ownersSupport regulatory compliance activities (ISO**, NIST, GDPR)Audit and document processes and prepare management reportsRequisitos principalesBachelor’s degree in a relevant field4+ years’ experience in Information Security, IT risk and complianceExperience in defining and executing an IT risk control framework for internal and third-party environmentsExperience performing information security and IT assessments and compliance/maturity assessmentsAbility to manage risks, vulnerabilities, and non-conformities; document and mitigateKPIs/KRIs definition and reporting for stakeholdersExperience in IT controls audits and remediation with internal and third partiesStrong planning, problem-solving, and complex technical issue analysisKnowledge of regulatory requirements (SOC 2, NIST, GDPR, COBIT, ITIL)Professional relationship-building and cross-functional collaborationEnglish proficiency; willingness to travelEffective communicationTeam collaborationRelationship buildingGRC tool (unspecified)MS OfficeInformation Security controls auditing

Requisitos principalesBachelor’s degree in a relevant field4+ years’ experience in Information Security, IT risk and complianceExperience in defining and executing an IT risk control framework for internal and third-party environmentsExperience performing information security and IT assessments and compliance/maturity assessmentsAbility to manage risks, vulnerabilities, and non-conformities; document and mitigateKPIs/KRIs definition and reporting for stakeholdersExperience in IT controls audits and remediation with internal and third partiesStrong planning, problem-solving, and complex technical issue analysisKnowledge of regulatory requirements (SOC 2, NIST, GDPR, COBIT, ITIL)Professional relationship-building and cross-functional collaborationEnglish proficiency; willingness to travelEffective communicationTeam collaborationRelationship buildingGRC tool (unspecified)MS OfficeInformation Security controls auditing