GRC Analyst

Datadefend; Frankfurt; Vor Ort; EUR 55.000 - 75.000; Vollzeit

Benefits dieser Stelle

Performance bonus

30 days vacation

Annual learning budget (€5,000)

Latest tech equipment

Regular team events

Zusammenfassung

Datadefend is seeking a GRC Analyst based in Frankfurt am Main to support clients with ISO 27001, SOC 2, and NIS2 compliance. Responsibilities include conducting compliance assessments, risk assessments, and developing security policies. The ideal candidate has 2+ years in GRC or information security with a strong knowledge of relevant frameworks. The position offers a competitive salary, 30 days vacation, and a remote-first work approach with optional office access in Frankfurt.

Qualifikationen

• 2+ years of experience in GRC, audit, or information security.
• Strong knowledge of ISO 27001, SOC 2, or similar frameworks.
• Experience conducting risk assessments.

Aufgaben

• Conduct compliance assessments against ISO 27001, SOC 2, TISAX, and NIS2.
• Perform risk assessments and develop risk treatment plans.
• Develop and review security policies, standards, and procedures.
• Support clients through certification audits.
• Create compliance documentation and evidence packages.

Kenntnisse

Risk assessments

Documentation skills

Communication skills (German and English)

Ausbildung

Relevant certifications (ISO 27001 Lead Auditor, CISA)

Tools

GRC tools (ServiceNow, OneTrust)

Jobbeschreibung

Governance, Risk & Compliance Remote / Frankfurt am Main Full-time

GRC Analyst

Support clients with ISO 27001, SOC 2, and NIS2 compliance. Conduct risk assessments and develop security policies.

Your Responsibilities

• Conduct compliance assessments against ISO 27001, SOC 2, TISAX, and NIS2
• Perform risk assessments and develop risk treatment plans
• Develop and review security policies, standards, and procedures
• Support clients through certification audits
• Create compliance documentation and evidence packages
• Track regulatory changes and advise clients on implications

Requirements

• 2+ years of experience in GRC, audit, or information security
• Strong knowledge of ISO 27001, SOC 2, or similar frameworks
• Experience conducting risk assessments
• Excellent documentation and analytical skills
• Strong communication skills in German and English
• Relevant certifications (ISO 27001 Lead Auditor, CISA) are a plus

Nice to have

• + Experience with NIS2 or KRITIS requirements
• + Knowledge of automotive security standards (TISAX, ISO 21434)
• + Familiarity with GRC tools (ServiceNow, OneTrust, etc.)
• + Background in internal audit or Big 4 consulting

What we offer

Competitive salary with performance bonus

30 days vacation + flexible working hours

Remote-first with optional Frankfurt am Main office

Annual learning budget (€5,000) and conference attendance

Latest tech equipment of your choice

Regular team events and offsites

Interested?

Send us your CV and a brief cover letter. We'll get back to you within 48 hours.