Senior GRC Analyst (m,f,x)

HelloFresh SE; Berlin; On-site; EUR 60,000 - 80,000; Full time

Benefits offered by this job

Pension Scheme

Berlin relocation support

Hybrid working model

Discounts on meals

German language learning budget

Mental health support

24/7 gym access

Job summary

A dynamic technology company in Berlin is seeking a Compliance Specialist to support information security and certification programs. The ideal candidate has over 3 years of experience in compliance activities, especially with data privacy regulations like GDPR. This role involves leading assessments, developing security policies, and managing vendor security reviews. The company offers a competitive compensation package along with unique perks including relocation support and mental health benefits.

Qualifications

• 3+ years' experience in compliance activities.
• Ability to map compliance regulations to implementations.
• Experience with third-party risk management.

Responsibilities

• Lead internal assessments and coordinate external audits.
• Evaluate and validate security policies and controls.
• Develop reports on the compliance landscape.

Skills

Compliance activities in corporate environment

Interpreting compliance regulations

Data privacy regulations (GDPR, CCPA)

Security awareness programs and trainings

Organizational skills

Detail-oriented

Experience in SaaS environment

Education

Industry compliance certifications (CISA, CISM, CISSP)

Job description

The role

We’re looking for a new teammate who will support the implementation and ongoing maintenance of information security compliance and certification programs, working with cross-functional internal teams and external auditing agencies. The person will also support data protection, data privacy, and third-party vendor risk management functions.

The position will be part of the Governance, Risk & Compliance (GRC) team at HelloFresh that is responsible for creating, maintaining and improving HelloFresh’s security risk management program and remediation activities; information security and data privacy related processes, policies, and guidelines; supporting compliance and certification related activities; and driving security awareness and education.

Above all, we are looking for people who willmake HelloFreshbetter. We believe there are many different ways of developing skills and we love diverse experiences! So even if you don’t “tick all the boxes” but think you’d thrive in this role, we would really like to learn more about you.

What you’ll do

• Lead internal assessments and coordinate external compliance audits at planned intervals
• Evaluate and validate the design and operational effectiveness of security policies, standards, and internal controls to help reduce compliance risk in the company
• Monitor open items from internal assessments and external compliance audits to ensure completion of remediation activities
• Support continuous monitoring processes to assess compliance with information security policies and standards as well as legal and regulatory compliance requirements
• Assist as required with third-partyvendor security reviews and assessments regarding their security and data privacy status
• Collaborate with various teams toidentify, document, assess and remediate security risks
• Participate in the development and implementation of security policies, standards, security awareness and end-user education efforts
• Develop comprehensive and accurate reports and presentations on the compliance landscape for both technical and executive audiences
• Use formal project management skills in planning, tracking, and reporting todrive remediation activities

What you’ll bring

• 3+ years' experience in performing compliance activities in a corporate environment related to IT General Controls (ITGC), SOC 2, ISO 27001, PCI DSS, EU NIS2, and various data privacy directives (GDPR, CCPA/CPRA, etc.)
• Ability tointerpret compliance regulations andmap them to the actual implementation of systems, whilst referencing various security frameworks
• Experience supporting data privacy regulations (GDPR, CCPA) and third-party risk management programs
• Experience with developing and executingsecurity awareness programs and trainings
• Highlyorganized anddetail-oriented, with an ability towork independently
• Industrycompliance certifications (CISA, CISM, CISSP) are a plus
• Prior experience working in aSaaS environment, mainlyCloud andAWS-based

What we offer

Elevate your lifestyle! Join one of Europe's fastest-growing tech powerhouses in a dynamic phase of expansion.

• Immerse yourself in a diverse global community of 90+ nationalities.
• Enjoy a competitive compensation package that goes beyond the norm, with perks like a HelloFresh-subsidized Pension Scheme, Berlin relocation support, and a Hybrid working model.
• Elevate your lifestyle with exclusive discounts on your weekly HelloFresh box and office meals.
• Invest in your growth with a German language learning budget, and access to the HelloFresh Academy.
• Plus, we've got your well-being covered with mental health support, transportation perks, and working-parent-friendly benefits. From our 24/7 gym access, wellbeing platforms like Headspace and Spill, to sabbatical leave options, HelloFresh is not just a workplace; it's a lifestyle of perks and possibilities!