Senior GRC Analyst
Location: Greece

We are seeking a Senior GRC Analyst to join the Information Security team as an individual contributor. The successful candidate will manage security risk assessments of both third parties and internal technologies, and support the day-to-day operations of the Governance, Risk and Compliance (GRC) function. The role also covers compliance activities related to technology assurance areas such as access management, vulnerability management, and configuration management, alongside governance activities including administrative management of risk and control registers, policies, and standards.

Responsibilities

Execute security risk assessments supporting the Risk Manager, including reporting, monitoring, and issue management, primarily but not limited to third parties and applications.
Manage the quarterly/annual review of risk acceptances and exceptions.
Create metrics and reporting for GRC initiatives.
Support development of the governance framework, including annual reviews.
Support security compliance activities such as assessments and audit support.
Support monitoring and reporting for regional activities.
Support key areas under CISO accountability, including data security and business continuity.

Requirements

2-4 years of experience in the Information Security field.
Experience with GRC tools (e.g., AuditBoard, Archer, or similar) considered an asset.
Knowledge of security concepts and methodologies such as risk assessments, risk & controls, policies & standards, enterprise security strategies, network, and cloud security.
Knowledge of security frameworks such as CIS and NIST.
Excellent written and verbal communication skills, including presentation skills, with the ability to clearly communicate issues to management and other key stakeholders.