Senior GRC Security Analyst – Remote (Switzerland)

Jobgether; Lavamünd; Vor Ort; EUR 90.000 - 150.000; Vollzeit

Benefits dieser Stelle

Competitive compensation

Stock options

Remote-first

Flexible environment

Career growth

Cross-functional exposure

International collaboration

Zusammenfassung

Jobgether is seeking an Information Security Analyst, GRC to join a remote-first security team focused on governance, risk, and compliance in a fast-growing AI-enabled environment. You will balance security with business priorities while helping customers through complex reviews.

You'll work across Sales, Legal, IT, and Engineering to implement SOC 2, ISO 27001, and GDPR-aligned controls, with opportunities to automate risk processes and scale the program.

Qualifikationen

• 7+ years in information security, risk, compliance, or a related discipline.
• Experience with SOC 2, ISO 27001, NIST, GDPR, and HIPAA.
• Ability to explain security concepts to both technical and non-technical audiences.

Aufgaben

• Support customers with security questionnaires, risk assessments, and due-diligence requests.
• Explain security controls, architecture, and compliance posture to sales and customer teams.
• Assess third-party vendor and SaaS risk; manage remediation.
• Maintain risk registers and evidence; support audits and reviews.
• Contribute to compliance initiatives with SOC 2, ISO 27001, and other standards.
• Identify opportunities to automate GRC processes as the organization scales.

Kenntnisse

Governance & compliance

Risk assessment

Security frameworks

Vendor risk management

Security questionnaires

Communication skills

Independent work

AI risk awareness

Analytical thinking

SaaS security

Ausbildung

CRISC certification

CISSP certification

Tools

Vanta

Jobbeschreibung

Jobgether is seeking an Information Security Analyst, GRC to join a remote-first security team focused on governance, risk, and compliance in a fast-growing AI-enabled environment. You will balance security with business priorities while helping customers through complex reviews.

You'll work across Sales, Legal, IT, and Engineering to implement SOC 2, ISO 27001, and GDPR-aligned controls, with opportunities to automate risk processes and scale the program.